Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2022-83599)

Apache JSPWiki is an open source WikiWiki engine built on Java, Servlet and JSP from the Apache (Apache) Foundation. Apache JSPWiki has a security vulnerability that stems from the fact that a carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability that an attacker could use to vulnerability in the victim’s browser to execute javascript and obtain some sensitive information about the victim.