CVE-2026-120421 | Eclipse Mojarra up to 4.0.28/4.1.19/5.0.0-M11 Client Window jfwid/jakarta.faces.ClientWindow cross site scripting

A vulnerability was found in Eclipse Mojarra up to 4.0.28/4.1.19/5.0.0-M11. It has been classified as problematic. The affected element is an unknown function of the component Client Window. This manipulation of the argument jfwid/jakarta.faces.ClientWindow causes cross site scripting.

This vulnerability is tracked as CVE-2026-120421. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More