Description
The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.
Remediation
References
https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p
Related Vulnerabilities
CVE-2014-0168 Vulnerability in maven package org.jolokia:jolokia-core
CVE-2013-4322 Vulnerability in maven package org.apache.tomcat:coyote
CVE-2021-27850 Vulnerability in maven package org.apache.tapestry:tapestry-core
CVE-2015-8859 Vulnerability in maven package org.webjars.npm:send
CVE-2018-3831 Vulnerability in maven package org.elasticsearch:elasticsearch