News · via oss-security
CVE-2026-123765: Apache Sling XSS: SLING-13406
Posted by Joerg Hoh on Nov 11 Severity: low Affected versions: - Apache Sling XSS before 2.4.14 Description: Improper neutralization of input during web page generation ('cross-site scripting')…