← CVE Intelligence

CVE-2021-36739

XSS vulnerability in the MVCBean JSP portlet maven archetype PUBLISHED

Description (CNA)

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Portalsaffected org.apache.portals.pluto.archetype:mvcbean-jsp-portlet-archetype 3.1.0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.