{"id":"CVE-2012-1006","aliases":[],"url":"https://o3.security/vulnerability/CVE-2012-1006","summary":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName…","details":"Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-rest-showcase/orders.","published":"2012-02-07T04:09:20.330","modified":"2026-06-16T23:38:47.410","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt"},{"type":"WEB","url":"http://secpod.org/blog/?p=450"},{"type":"WEB","url":"http://www.securityfocus.com/bid/51902"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72888"},{"type":"WEB","url":"http://secpod.org/advisories/SecPod_Apache_Struts_Multiple_Parsistant_XSS_Vulns.txt"},{"type":"WEB","url":"http://secpod.org/blog/?p=450"},{"type":"WEB","url":"http://www.securityfocus.com/bid/51902"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/72888"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-16T23:38:47.410"}}