Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2022-17019)

JSPWiki is an open source JSP-based Wiki system from Apache, based on the file system, with permissions management and search capabilities.Apache JSPWiki versions prior to 2.11.2 have a cross-site scripting vulnerability in the user preferences screen. An attacker could use this vulnerability to execute javascript in the victim’s browser and obtain sensitive information.