Description
Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.
Remediation
References
Related Vulnerabilities
WordPress Plugin Form Builder CP Unspecified Vulnerability (1.2.15)
WordPress Plugin RSS Includes Pages Cross-Site Scripting (3.6)
PHP Other Vulnerability (CVE-2007-1286)
XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-35152)
Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-19499)