CVE-2026-82387: Apache Roller: Stored cross-site scripting via uploaded media content type
Apache Roller 6.1.5 allows media uploaders to store XSS by spoofing content type, CVE-2026-82387.
1 stories, newest first · one card per story
Apache Roller 6.1.5 allows media uploaders to store XSS by spoofing content type, CVE-2026-82387.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views