Skip to contentApache Software Foundation Sling Xss vulnerabilities
- apache software foundation sling xssApache Sling XSS: xssAPI.getStyleToken() accepts markup in unquoted urls.CVE-2026-123765No score
- apache software foundation sling xss, apache sling xss protection api +1 moreApache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanismsCVE-2026-919286.1 Medium
- apache software foundation sling xss, apache sling xss protection api +1 moreApache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImplCVE-2026-918526.1 Medium
- apache software foundation sling xss, apache sling xss protection api +1 moreApache Sling XSS: Improper escaping in the XSS Webconsole pluginCVE-2026-919996.1 Medium
- apache software foundation sling xss, apache sling xss protection api +1 moreApache Sling XSS: Missing parser resource limitsCVE-2026-920016.1 Medium
- apache software foundation sling xss, apache sling xss protection api +1 moreApache Sling XSS: XSS possible through XSSAPI.getValidHref()CVE-2026-731926.1 Medium