Description
Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.
Remediation
References
http://jvn.jp/en/jp/JVN88408929/index.html
http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000124.html
http://www.securityfocus.com/bid/76624
https://security.netapp.com/advisory/ntap-20200330-0001/
Related Vulnerabilities
CVE-2021-21118 Vulnerability in maven package org.webjars.npm:electron
CVE-2021-37404 Vulnerability in maven package org.apache.hadoop:hadoop-common
CVE-2016-6810 Vulnerability in maven package org.apache.activemq:activemq-web-console
CVE-2019-15782 Vulnerability in maven package org.webjars.npm:webtorrent
CVE-2021-23797 Vulnerability in npm package http-server-node