CVE-2016-0711

published 2016-04-11

CVE-2016-0711: Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apache	jetspeed	<= 2.3.0	—

CWE-79