CVE-2020-1949

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles…

published April 1, 2020

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01965 · 80.2th percentile
Published
2020-04-01T18:25Z
EPSS history
Timeline
  • 01 APR 18:25Z
    Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles…
    cvelistv5