CVE-2017-15719

2018-03-1213:00:00

apache

www.cve.org

EPSS

0.001

Percentile

29.5%

JSON

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.

CNA Affected

[
  {
    "product": "Wicket jQuery UI",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "<= 6.28.0"
      },
      {
        "status": "affected",
        "version": "<= 7.9.1"
      },
      {
        "status": "affected",
        "version": "<= 8.0.0-M8"
      }
    ]
  }
]