Apache Wicket Cross-Site Scripting Vulnerability (CNVD-2016-02216)

Apache Wicket is the United States Apache Apache Software Foundation of a set of open source , lightweight , component-based framework. Apache Wicket's RadioGroup and CheckBoxMultipleChoice classes in the cross-site scripting vulnerability , remote attackers can use the input element with the hel...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the 1 RadioGroup and 2 CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a element...

CVE-2015-7520

Affected software: Apache Wicket. Vulnerable components: RadioGroup and CheckBoxMultipleChoice classes. Versions impacted: 1.5.x before 1.5.15; 6.x before 6.22.0; 7.x before 7.2.0. Issue: Multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML through a crafted ...