Threats tagged 'ghsa-26cw-37ff-mmw4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.8%	CVE-2026-73238code display · XSS Vulnerability Medium6.1EPSS 0.8%2026-08-12GCVE DatabaseCVE-2026-73238 An XSS (Cross-Site Scripting) vulnerability exists in the code display functionality of Apache Allura versions before 1.19.1. This vulnerability allows injection of malicious scripts in the affected component. The issue is fixed in Apache Allura version 1.19.1, and users are advised to upgrade to this version to remediate the vulnerability. EPSS 0.8%Report on CVE-2026-73238 Vulnerability CWE-80 #ghsa-26cw-37ff-mmw4	GCVE Database	2026-08-12

Page 1 of 1