Threats tagged 'ghsa-rc4h-46w7-hp9c'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123765xss · Improper neutralization of input during web page generation ('cross-site scripting') vulnerability High2026-11-12GCVE DatabaseCVE-2026-123765 A cross-site scripting (XSS) vulnerability exists in Apache Sling XSS before version 2.4.14. The issue arises because the xssAPI.getStyleToken() method improperly neutralizes input, allowing markup in unquoted URLs during web page generation. This flaw could enable injection of malicious scripts into web pages. Report on CVE-2026-123765 Vulnerability CWE-79 #ghsa-rc4h-46w7-hp9c	GCVE Database	2026-11-12

Page 1 of 1