XSS in V3 Demo Portlet
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.3%
exploitation probability
2.3%top 17% of all CVEs
observed exploitation
nono source reports it
The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact
Affected products
Apache Software Foundation · Apache Portals