Security Advisory

CVE-2016-0711

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2016-04-11 14:00:00
Last updated 2024-08-05 22:30:04
Assigner redhat
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.