Description
JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one of the XHR parameters in Users REST API endpoint. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.36.1 versions prior to 7.29.8; JFrog Artifactory versions before 6.23.41 versions prior to 6.23.38.
Remediation
References
Related Vulnerabilities
WordPress Plugin Social Media Widget by Acurax Cross-Site Scripting (2.2)
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-43803)
WordPress Plugin A/B Test 'action' Parameter Directory Traversal (1.0.6)
WordPress Plugin Header Footer Code Manager Cross-Site Scripting (1.1.16)
WebLogic URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2026-35302)