Vulnerability record: CVE-2016-5394 in apache/sling-org-apache-sling-xss (version 1.0.8)
Weakness: CWE-079 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
GitHub Security Advisory: GHSA-xwf4-88xr-hx2j
Repository: https://github.com/apache/sling-org-apache-sling-xss
Buggy commit: e23ca68878dd6504066015601b6b76e8fe19b752
Fix commit(s): de32b144ad2be3367559f6184d560db42a220529