The Javascript method Sling.evalString() in Apache Sling Servlets Post prior to 2.3.22 uses the javascript 'eval' function to parse input strings, which allows for XSS attacks by passing specially crafted input strings.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apache sling servlets post |