Lucene search
PRIOn knowledge basePRION:CVE-2022-46769HistoryJan 09, 2023 - 11:15 a.m.
Cross site scripting
2023-01-0911:15:00
PRIOn knowledge base
www.prio-n.com
5
cross-site scripting
input neutralization
sling app cms
reflected xss
remote attack
upgrade recommendation
0.001 Low
EPSS
Percentile
38.4%
An improper neutralization of input during web page generation (‘Cross-site Scripting’) [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the site group feature. Upgrade to Apache Sling App CMS >= 1.1.4
References
Related
cvelist
cvelist
CVE-2022-46769 Apache Sling App CMS: XSS in CMS Site Group Detail
2023-01-09 10:14:56
veracode
veracode
Cross-site Scripting (XSS)
2023-01-10 02:36:22
cve
cve
CVE-2022-46769
2023-01-09 11:15:10
github
github
Apache Sling App CMS vulnerable to reflected Cross-site Scripting
2023-01-09 12:30:18
osv
osv
Apache Sling App CMS vulnerable to reflected Cross-site Scripting
2023-01-09 12:30:18
CVE-2022-46769
2023-01-09 11:15:10
nvd
nvd
CVE-2022-46769
2023-01-09 11:15:10