GHSA-jg6j-jrxv-2hh9
Cross-site Scripting in Apache Pluto
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.portals.pluto:pluto-portal | < 3.1.1 | 3.1.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
References
External links from the advisory. They lead to third-party sites.