Apache Sling XSS

5 known vulnerabilities in Apache Sling XSS, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-92001 CVSS 6.1 medium Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. This issue affects…
CVE-2026-91999 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects…
CVE-2026-91928 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects…
CVE-2026-91852 CVSS 6.1 medium Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects…
CVE-2026-73192 CVSS 6.1 medium An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when using the…