CVE-2020-1949 | BDVDB-2026-133283 Detail
Apache Sling
Description#
Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.