Vulnerability intelligence

CVE-2026-80180

Apache Software Foundation Apache Allura CWE-79

Stored XSS via markdown HTML processing in Apache Allura. This issue affects Apache Allura: from through 1.20.0. Users are recommended to upgrade to version 1.21.0, which fixes the issue.

CVSS Score

6.1

Medium

EPSS — Exploit Probability

0.3%

Riskier than 17% of all CVEs · checked 2026-10-20

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

unknown

Check vendor advisories

NVD entry PoC / advisory

1 article across 1 outlet · first covered Sep 4, 2026 · latest Sep 4, 2026

Coverage timeline

Apache Allura Fixes Four Flaws That Could Expose Repositories
securityonline.info · Sep 4, 2026

Related CVEs — Apache Software Foundation

CVE-2026-101296 CVE-2026-101356 CVE-2026-103119 CVE-2026-64959 CVE-2026-94134 CVE-2026-94135 CVE-2026-96806 CVE-2026-103413