What’s Vulnerable › Products

Apache Software Foundation Apache Sling XSS vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Apache Software Foundation Apache Sling XSS version is affected

Latest Apache Software Foundation Apache Sling XSS vulnerabilities

• CVE-2026-92001 — Apache Sling XSS: Missing parser resource limits (CVSS 6.1)
• CVE-2026-91999 — Apache Sling XSS: Improper escaping in the XSS Webconsole plugin (CVSS 6.1)
• CVE-2026-91928 — Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms (CVSS 6.1)
• CVE-2026-91852 — Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImpl (CVSS 6.1)
• CVE-2026-73192 — Apache Sling XSS: XSS possible through XSSAPI.getValidHref() (CVSS 6.1)
• CVE-2017-15717 — (CVSS 6.1)