org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.12.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.12.2) +5 more potentially affected by CVE-2025-24854 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.12.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.12.2 Source cves: CVE-2025-24854 Source advisory: OSV:GHSA-72WW-4RCW-MC62...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.12.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.12.2) +5 more potentially affected by CVE-2025-24853 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.12.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.12.2 Source cves: CVE-2025-24853 Source advisory: OSV:GHSA-RRFF-CHJ9-W4C7...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.12.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.12.2) +5 more potentially affected by CVE-2025-24854 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.12.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.12.2 Source cves: CVE-2025-24854 Source advisory: SNYK:JAVA-ORGAPACHEJSPWIKI-11357915...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.12.0), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.12.0) +5 more potentially affected by CVE-2024-27136 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.12.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.12.1 Source cves: CVE-2024-27136 Source advisory: OSV:GHSA-36GF-VPJ2-J42W...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.3), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.11.3) +5 more potentially affected by CVE-2022-46907 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.3)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2022-46907 Source advisory: OSV:GHSA-QVQ8-CW7F-M7M4...

Cross-site Scripting (XSS)

jspwiki-main is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of sanitization in the startDay attribute in the execute function of WeblogPlugin.java, allowing an attacker to inject and execute malicious javascript through the maliciously crafted WeblogPlugin...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.11.2) +5 more potentially affected by CVE-2022-34158 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34158 Source advisory: OSV:GHSA-JP3M-P26H-MM7V...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.11.2) +5 more potentially affected by CVE-2022-27166 +1 more via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-27166, CVE-2022-28732 Source advisory: OSV:GHSA-2FXF-QJ94-3F83...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.11.2) +5 more potentially affected by CVE-2022-28730 +1 more via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-28730, CVE-2022-28732 Source advisory: OSV:GHSA-GGJQ-8C4C-68R5...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.2), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.11.2) +5 more potentially affected by CVE-2022-28732 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.2)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-28732 Source advisory: OSV:GHSA-HPH8-29XW-QFXX...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.0.M4), org.apache.jspwiki:jspwiki-210-adapters (=2.11.0) +4 more potentially affected by CVE-2019-12407 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.0.M4)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0.M4 Source cves: CVE-2019-12407 Source advisory: OSV:GHSA-P2R4-RPJ8-M2P9...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.11.1) +5 more potentially affected by CVE-2022-24947 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 Source cves: CVE-2022-24947 Source advisory: OSV:GHSA-4284-X26R-4HHC...

org.apache.jspwiki.it:jspwiki-selenide-tests (>=2.11.0 <=2.11.1), org.apache.jspwiki:jspwiki-210-adapters (>=2.11.0 <=2.11.1) +5 more potentially affected by CVE-2022-24948 via org.apache.jspwiki:jspwiki-main (>=2.11.0 <=2.11.1)

org.apache.jspwiki:jspwiki-main MAVEN version =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 Source cves: CVE-2022-24948 Source advisory: OSV:GHSA-9953-FMRW-V4VM...

Cross-site Scripting (XSS)

jspwiki-main is vulnerable to cross-site scripting XSS. The vulnerability exists as the value of title and rootname are not sanitized in org/apache/wiki/plugin/ReferredPagesPlugin.java...

Local File Inclusion

jspwiki-main is vulnerable to local file inclusion. An attacker is able to retrieve registered user details using a malicious URL to access files under the ROOT directory...