Apache JSPWiki cross-site scripting vulnerability (CNVD-2023-43867)

Apache JSPWiki is the United States Apache (Apache) Foundation of a Java, Servlet and JSP based on the construction of open source WikiWiki engine . A cross-site scripting vulnerability exists in Apache JSPWiki versions prior to 2.12.0. The vulnerability stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute javascript in the victim’s browser and obtain sensitive information about the victim.