Cross-site Scripting (XSS)

Overview org.apache.wicket:wicket-extensions is a rich component library for the Wicket framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the UploadProgressBar initialization script in wicket-extensions. The script inserts the UploadProgressBar.starting...