{"cvss":0.0,"datePublished":"2023-12-05T00:00:00Z","dateUpdated":"2023-12-05T00:00:00Z","description":"Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.","dueDate":"","id":"CVE-2020-1943","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"OFBiz","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Apache OFBiz Improper Neutralization of Input During Web Page Generation","vendor":"Apache"}