Jahia the Java Open Source Web Content Management Community

A security fix is available on the customer extranet and must be applied on version 6 of Jahia to correct XSS vulnerability in public form fields. The fix consists of JSP's updates you can manually apply by using the following JSPs diffs available below :

• <installation-context>/engines/login/login.jsp - Diffs
• <installation-context>/admin/login.jsp - Diffs
• <installation-context>/templates/web_templates/areas/joblist.jsp - Diffs

 We strongly advise you to do the same on all other public forms you could have added in public pages.