Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.struts/struts2-config-browser-plugin@2-alpha0
purl pkg:maven/org.apache.struts/struts2-config-browser-plugin@2-alpha0
Tags Ghost
Next non-vulnerable version 2.5.33
Latest non-vulnerable version 6.3.0.2
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-qqm4-frqy-bua5
Aliases:
CVE-2013-6348
GHSA-3g8j-jj54-3vjg
XSS via malicious action parameter Multiple cross-site scripting (XSS) vulnerabilities in this package allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to `actionNames.action` and `showConfig.action` in `config-browser/`.
2.3.16
Affected by 4 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:46:50.693420+00:00 GitLab Importer Affected by VCID-qqm4-frqy-bua5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.struts/struts2-config-browser-plugin/CVE-2013-6348.yml 38.0.0