{"id":27938,"date":"2026-09-23T20:31:17","date_gmt":"2026-09-23T12:31:17","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-73192"},"modified":"2026-09-23T20:31:17","modified_gmt":"2026-09-23T12:31:17","slug":"cve-2026-73192","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-73192","title":{"rendered":"CVE-2026-73192 &#8211; An improper neutralization of input during web page generation (&#8216;Cross-site Scripting&#8217;) [C"},"content":{"rendered":"<p>An improper neutralization of input during web page generation (&#8216;Cross-site Scripting&#8217;) [CWE-79] vulnerability when using the XSSAPI.getValidHref() in Apache Sling XSS version 2.4.10 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack in every feature using this method. In order to successfully attack an application, the attacker needs to be able to submit a value which is not correctly sanitized by that library.<\/p>\n<p>Upgrade to Apache Sling XSS &gt;= 2.4.12<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An improper neutralization of input during web page generation (&#8216;Cross-site Scripting&#8217;) [CWE-79] vulnerability when using the XSSAPI.getValidHref() in Apache Sling XSS version 2.4.10 and prior may all<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-27938","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/27938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=27938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=27938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=27938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}