org.wso2.carbon.analytics-common:org.wso2.carbon.event.receiver.ui vulnerabilities

CVEs whose affected-version data names the org.wso2.carbon.analytics-common:org.wso2.carbon.event.receiver.ui package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-6623Medium· 4.3

today

Stored Cross-Site Scripting via XML Input in Multiple WSO2 Products Allows UI Manipulation and Redirection

The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts. Successful exploitation allows a remote attacker to execute arbitrary Java…

▾ SunlitWSO2 · WSO2 API Managervia CVEORG