GHSA-7QMG-QG53-MRP8 Cross-site scripting in Apache JSPWiki

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-12404 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-12404 Source advisory: GHSA-7QMG-QG53-MRP8...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-12404 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-12404 Source advisory: OSV:GHSA-7QMG-QG53-MRP8...

Cross-site scripting in Apache JSPWiki

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the...

GHSA-3RX2-X6MX-GRJ3 Cross-site scripting in Apache JSPWiki

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10089 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10089 Source advisory: OSV:GHSA-3RX2-X6MX-GRJ3...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10089 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10089 Source advisory: GHSA-3RX2-X6MX-GRJ3...

Cross-site scripting in Apache JSPWiki

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10087 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10087 Source advisory: GHSA-GWFQ-QWMP-X9XG...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10087 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10087 Source advisory: OSV:GHSA-GWFQ-QWMP-X9XG...

GHSA-GWFQ-QWMP-X9XG Cross-site scripting in Apache JSPWiki

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about...

Cross-site scripting in Apache JSPWiki

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victi...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10090 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10090 Source advisory: OSV:GHSA-G6WW-2X43-H963...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10090 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10090 Source advisory: GHSA-G6WW-2X43-H963...

GHSA-G6WW-2X43-H963 Cross-site scripting in Apache JSPWiki

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victi...

CVE-2019-10090

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victi...

CVE-2019-12407

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive...

CVE-2019-10090

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victi...

CVE-2019-12407

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive...

CVE-2019-12407

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive...