Description
Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via a crafted string.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-5775 Vulnerability (CVE-2013-5775)
Oracle HTTP Server CVE-2021-25219 Vulnerability (CVE-2021-25219)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3383)
Next.js User Interface (UI) Misrepresentation of Critical Information Vulnerability (CVE-2022-23646)