description: Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.
problem types: Cross-Site Scripting
affected:
{
product: Apache Struts
vendor: Apache Software Foundation
versions:
status: affected, version: before 2.3.20
}