Every CVE whose affected-product data names Apache Sling Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2020-1949 — CVSS 6.1 (medium): Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the…
CVE-2023-22849 — CVSS 6.1 (medium): An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version…
CVE-2022-43670 — CVSS 5.4 (medium): An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version…
CVE-2022-46769 — CVSS 5.4 (medium): An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version…