https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:42:26.741177+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-28448 cnvd-2017-28448 2026-10-09T11:42:26.807868+00:00 cnvd-2017-28448 https://cve.radiocsirt.org/vuln/euvd-2026-76081 EUVD-2026-76081 2026-10-09T11:42:26.807908+00:00 EUVD-2026-76081 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9802 fkie_cve-2017-9802 2026-10-09T11:42:26.807923+00:00

The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows for XSS attacks by passing specially crafted input strings.

 https://cve.radiocsirt.org/vuln/ghsa-8c82-9rgp-4qvr GHSA-8c82-9rgp-4qvr — Improper Neutralization of Input During Web Page Generation Apache Sling Servlets Post 2026-10-09T11:42:26.807954+00:00

Affected: Maven: org.apache.sling:org.apache.sling.servlets.post

The Javascript method Sling.evalString() in Apache Sling Servlets Post before 2.3.22 uses the javascript 'eval' function to parse input strings, which allows for XSS attacks by passing specially crafted input strings.

 https://cve.radiocsirt.org/vuln/gsd-2017-9802 gsd-2017-9802 2026-10-09T11:42:26.807977+00:00 gsd-2017-9802