Skip to content

Product

org.apache.struts/struts2-dojo-plugin vulnerabilities

1 published CVE affecting org.apache.struts/struts2-dojo-plugin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.struts/struts2-dojo-plugin CVEs

Newest publication first

  1. CVE-2007-6726 Apache Struts Dojo Plugin XSS Vulnerability

    Published
    MediumCVSS 4.3 EPSS 3.4%

    Multiple cross-site scripting (XSS) vulnerabilities in Dojo 0.4.1 and 0.4.2, as used in Apache Struts and other products, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) xip_client.html and (2) xip_server.html in src/io/.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.