Threats tagged 'ghsa-6v7m-223w-55wp'

Apache Roller versions 5.0.1 through 6.1.6 contain a cross-site scripting (XSS) vulnerability that allows authenticated users with the Author role to inject script via entry tags submitted through AtomPub. The vulnerability arises because Roller’s tag filter permits HTML characters in tag names, and certain themes and macros render these tags without escaping, enabling script execution in viewers' browsers. AtomPub is disabled by default, and since version 6.1.4, the default setting assumes weblog authors are untrusted. Upgrading to version 6.1.7 or later mitigates this issue by removing HTML characters from tag names, including previously stored ones.