Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2021-92465)

Apache JSPWiki is an open source WikiWiki engine built on Java, Servlet, and JSP from the Apache Foundation.A security vulnerability exists in Apache JSPWiki, which stems from a well-designed plugin link call that could trigger an XSS vulnerability in Apache JSPWiki related to Denounce plug-in-related XSS vulnerability, which can be exploited by attackers to execute javascript in the victim’s browser and obtain some sensitive information about the victim.