https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 06:57:38 +0000 https://db.gcve.eu/vuln/cve-2026-73192 <p><strong>Affected:</strong> Apache Software Foundation Apache Sling XSS</p> <p>An improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) [CWE-79] vulnerability when using the XSSAPI.getValidHref() in Apache Sling XSS version 2.4.10 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack in every feature using this method. In order to successfully attack an application, the attacker needs to be able to submit a value which is not correctly sanitized by that library.</p> <p>Upgrade to Apache Sling XSS &gt;= 2.4.12</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Sling XSS</p> <p>An improper neutralization of input during web page generation (&#39;Cross-site Scripting&#39;) [CWE-79] vulnerability when using the XSSAPI.getValidHref() in Apache Sling XSS version 2.4.10 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack in every feature using this method. In order to successfully attack an application, the attacker needs to be able to submit a value which is not correctly sanitized by that library.</p> <p>Upgrade to Apache Sling XSS &gt;= 2.4.12</p> https://db.gcve.eu/vuln/cve-2026-73192