description: Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
problem types: XSS Vulnerability
affected:
{
product: Apache OFBiz
vendor: Apache
versions:
status: affected, version: 16.11.01 to 16.11.07
}