CVE-2015-6748

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

• CWE-79

• http://www.openwall.com/lists/oss-security/2015/08/28/5Mailing List
• http://www.securityfocus.com/bid/76504Broken Link, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1258310Issue Tracking, Third Party Advisory
• https://github.com/jhy/jsoup/pull/582Patch, Third Party Advisory
• https://hibernate.atlassian.net/browse/HV-1012Issue Tracking
• https://issues.jboss.org/browse/WFLY-5223?_sscc=tIssue Tracking
• https://lists.debian.org/debian-lts-announce/2020/01/msg00021.htmlMailing List
• http://www.openwall.com/lists/oss-security/2015/08/28/5Mailing List
• http://www.securityfocus.com/bid/76504Broken Link, Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1258310Issue Tracking, Third Party Advisory
• https://github.com/jhy/jsoup/pull/582Patch, Third Party Advisory
• https://hibernate.atlassian.net/browse/HV-1012Issue Tracking
• https://issues.jboss.org/browse/WFLY-5223?_sscc=tIssue Tracking
• https://lists.debian.org/debian-lts-announce/2020/01/msg00021.htmlMailing List

Published

Sep 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6742Basware Banking (Maksuliikenne) before 8.90.07.X uses a hard…
• CVE-2015-6743Basware Banking (Maksuliikenne) 8.90.07.X uses a hardcoded p…
• CVE-2015-6744Basware Banking (Maksuliikenne) before 8.90.07.X relies on t…
• CVE-2015-6745Basware Banking (Maksuliikenne) 8.90.07.X relies on the clie…
• CVE-2015-6746Basware Banking (Maksuliikenne) before 8.90.07.X stores priv…
• CVE-2015-6747Basware Banking (Maksuliikenne) 8.90.07.X does not properly …
• CVE-2015-6749Buffer overflow in the aiff_open function in oggenc/audio.c …
• CVE-2015-6750Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier a…
• CVE-2015-6751Multiple cross-site scripting (XSS) vulnerabilities in the T…
• CVE-2015-6752Cross-site scripting (XSS) vulnerability in the Search API A…
• CVE-2015-6753Multiple cross-site scripting (XSS) vulnerabilities in the Q…
• CVE-2015-6754Cross-site scripting (XSS) vulnerability in the administrati…