Unrated severityNVD Advisory· Published Sep 23, 2026
CVE-2026-91928
CVE-2026-91928
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS.
This issue affects Apache Sling XSS: before 2.4.12.
Users are recommended to upgrade to version 2.4.12, which fixes the issue.
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.