org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: GHSA-5Q75-CXCQ-WR26...

Cross-site Scripting in jspwiki-war

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2019-41281)

Apache JSPWiki is the U.S. Apache Apache Software Foundation of a Java-based , Servlet and JSP to build an open source WikiWiki engine . A cross-site scripting vulnerability exists in Apache JSPWiki version 2.10.5 and earlier, which stems from a lack of proper validation of client-side data by th...

CVE-2018-20242

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

CVE-2018-20242

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

CVE-2018-20242

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

Cross site scripting

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

CVE-2018-20242

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

org.apache.jspwiki.it:jspwiki-selenium-tests (>=2.10.0, <=2.10.5), org.apache.jspwiki:jspwiki-markdown (>=2.10.3, <=2.10.5) potentially affected by CVE-2018-20242 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.10.5)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2018-20242 Source advisory: MEND:CVE-2018-20242...

CVE-2018-20242

This CVE affects Apache JSPWiki up to version 2.10.5, where a crafted URL could trigger a cross-site scripting (XSS) vulnerability. The described impact is potential session hijacking. The connected documents consistently identify JSPWiki as the affected product and the vulnerability type as XSS,...

CVE-2018-20242

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

CVE-2018-20242: Improper Neutralization of Input During Web Page Generation

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...

PT-2019-4411

Name of the Vulnerable Software and Affected Versions Apache JSPWiki versions up to 2.10.5 Description The issue is related to a lack of protection measures for the web page structure in Apache JSPWiki, based on JSP technology. A carefully crafted URL could trigger a session hijacking issue...

JSPWiki <= 2.5.139 NewGroup.jsp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied inpu...

JSPWiki 2.1 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11746/info It is reported that JSPWiki is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input prior to including it in...

jspwiki 2.4.104 / 2.5.139 Multiple Vulnerabilities

No description provided by source. JSPWiki Multiple Vulnerabilities Vendor: Janne Jalkanen JSPWiki – http://www.jspwiki.org Application Description: From JSPWiki website - “JSPWiki is a feature-rich and extensible WikiWiki engine built around a standart J2EE components Java, servlets, JSP.” Teste...

JSPWiki <= 2.5.139 Edit.jsp edittime Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied inpu...

JSPWiki <= 2.5.139 Login.jsp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied inpu...

JSPWiki <= 2.5.139 Comment.jsp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied inpu...

JSPWiki <= 2.5.139 UserPreferences.jsp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied inpu...