← Database

CVE-2021-36739

MEDIUM CVSS: 6.1 Published: 2022-01-06 Modified: 2026-06-17

Description

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.

Affected Platforms

Apache Pluto

Weakness Type

CWE-79, CWE-79

References