Description
Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Remediation
References
http://jvn.jp/en/jp/JVN52422792/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000118
Related Vulnerabilities
CVE-2021-20323 Vulnerability in maven package org.keycloak:keycloak-core
CVE-2019-10077 Vulnerability in maven package org.apache.jspwiki:jspwiki-main
CVE-2019-15607 Vulnerability in npm package node-red
CVE-2020-19698 Vulnerability in npm package editor.md
CVE-2023-42399 Vulnerability in maven package org.webjars.npm:jodit