Medium severity6.1NVD Advisory· Published Apr 11, 2016· Updated May 6, 2026
CVE-2016-0711
CVE-2016-0711
Description
Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.portals.jetspeed-2:jetspeed-commonsMaven | < 2.3.1 | 2.3.1 |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- portals.apache.org/jetspeed-2/security-reports.htmlnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-5pgm-9g57-3wc7ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2016-0711ghsaADVISORY
- mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F%40bluesunrise.com%3EnvdWEB
- mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3C73AC0763-D44B-4BDF-867C-05AD4674A62F@bluesunrise.com%3EghsaWEB
News mentions
0No linked articles in our index yet.