pkg:Maven/org.apache.sling:org.apache.sling.xss

All known vulnerabilities

• CRITICAL9.8CVE-2016-6798XML External Entity Reference in Apache Sling
  from 0, < 1.0.12
• MEDIUM6.1CVE-2017-15717Cross-site Scripting in Apache Sling XSS Protection API
  >= 1.0.4, < 2.0.4
• MEDIUM6.1CVE-2016-5394Cross site scripting in Apache Sling
  from 0, < 1.0.12