apache__jspwiki_CVE-2019-10089_2-11-0-M4

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10089 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10089 Source advisory: OSV:GHSA-3RX2-X6MX-GRJ3...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10089 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10089 Source advisory: GHSA-3RX2-X6MX-GRJ3...

CVE-2019-10089

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the...

CVE-2019-10089

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the...