CVE-2026-86507: Apache Roller: Stored XSS in comment moderation via comment author URL
Apache Roller 6.1.5 stored XSS can run in moderator or administrator sessions via comment-author URLs.
1 stories, newest first · one card per story
Apache Roller 6.1.5 stored XSS can run in moderator or administrator sessions via comment-author URLs.
Today 1.6K readers · 2.5K views · 785 reads · all time 189K views