CVE-2026-83559

The Apache Wicket framework is vulnerable to an improper encoding issue in org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuotes(). The method fails to escape backslashes before escaping quotes, allowing an attacker to break out of a JavaScript string literal if they can influence the i...