Lucene search

K
osvGoogleOSV:CVE-2019-10078
HistoryMay 20, 2019 - 9:29 p.m.

CVE-2019-10078

2019-05-2021:29:00
Google
osv.dev
6

0.006 Low

EPSS

Percentile

79.1%

A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.

0.006 Low

EPSS

Percentile

79.1%