shoucheng3/apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

PoC

view exploit source poc_in_githubauthor shoucheng3published 2025-08-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-5394US	medium6.1	2.60% (85th)	Exploit	2017-07-19
In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString() method is not restrictive enough and for some input patterns all…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.