CVE-2026-82546: Apache Roller: Stored cross-site scripting through incoming Trackback links
Apache Roller 6.1.5 has stored XSS via crafted Trackback author URLs, CVE-2026-82546.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #trackback
CVE-2026-82376: Apache Roller: XML external entity processing in trackback response parser
Apache Roller 6.1.5 parses trackback responses with XXE enabled, exposing server files.