Lucene search

K
osvGoogleOSV:GHSA-PWPC-HQQ2-HX2X
HistoryMay 14, 2022 - 12:58 a.m.

Cross-site Scripting in wicket-jquery-ui

2022-05-1400:58:28
Google
osv.dev
6
cross-site scripting
wicket jquery ui
security vulnerability

EPSS

0.001

Percentile

29.5%

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.

EPSS

0.001

Percentile

29.5%

Related for OSV:GHSA-PWPC-HQQ2-HX2X