https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T16:50:27.226249+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225093 EUVD-2026-225093 2026-10-18T16:50:27.230482+00:00 EUVD-2026-225093 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22849 fkie_cve-2023-22849 2026-10-18T16:50:27.230515+00:00

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in multiple features.

Upgrade to Apache Sling App CMS >= 1.1.6

 https://cve.radiocsirt.org/vuln/ghsa-rghh-ghf7-7943 GHSA-rghh-ghf7-7943 — Sling App CMS Cross-site Scripting vulnerability 2026-10-18T16:50:27.230547+00:00

Affected: Maven: org.apache.sling:org.apache.sling.cms

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in multiple features. Upgrade to Apache Sling App CMS >= 1.1.6

 https://cve.radiocsirt.org/vuln/gsd-2023-22849 gsd-2023-22849 2026-10-18T16:50:27.230571+00:00 gsd-2023-22849 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0287 WID-SEC-W-2023-0287 — Apache Sling: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-18T16:50:27.230582+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Sling ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.