| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.sling:org.apache.sling.cms | < 1.1.2 | 1.1.2 |
| sling cms | ≤ 1.1.0 |
A Cross-site Scripting vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the taxonomy management feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free