Wso2 Carbon Event Receiver Ui
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Carbon Event Receiver Ui.
By the Year
In 2026 there have been 1 vulnerability in Wso2 Carbon Event Receiver Ui with an average score of 4.3 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 4.30 |
It may take a day or so for new Wso2 Carbon Event Receiver Ui vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Carbon Event Receiver Ui Security Vulnerabilities
WSO2 Carbon: XSS via Unencoded XML Input in Carbon Console
CVE-2025-6623
4.3 - Medium
- October 19, 2026
The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts. Successful exploitation allows a remote attacker to execute arbitrary JavaScript in the context of a victim's browser, leading to actions such as redirecting the user to a malicious website or modifying the web page's user interface. Session hijacking is not possible as sensitive session cookies are protected by the httpOnly flag.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Carbon Event Receiver Ui or by Wso2? Click the Watch button to subscribe.
