org.apache.jspwiki.wikipages:jspwiki-wikipages-builder (2.12.2), org.apache.jspwiki.wikipages:jspwiki-wikipages-de (2.12.2) +10 more potentially affected by CVE-2025-24853 via org.apache.jspwiki:jspwiki-markdown (>=2.11.0.m1, <=2.12.2)

org.apache.jspwiki:jspwiki-markdown MAVEN version =2.11.0.m1, =2.11.0.m1, =2.12.2 Source cves: CVE-2025-24853 Source advisory: MEND:CVE-2025-24853...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10090 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10090 Source advisory: GHSA-G6WW-2X43-H963...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10090 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10090 Source advisory: OSV:GHSA-G6WW-2X43-H963...

org.apache.jspwiki.it:jspwiki-it-builder (>=2.11.0.m1, <=2.11.0.m4), org.apache.jspwiki.it:jspwiki-it-test-cma (>=2.11.0.m1, <=2.11.0.m4) +7 more potentially affected by CVE-2019-10090 via org.apache.jspwiki:jspwiki-war (>=2.10.0, <=2.11.0.m4)

org.apache.jspwiki:jspwiki-war MAVEN version =2.10.0, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.11.0.m1, =2.10.0, =2.10.3, =2.10.5 Source cves: CVE-2019-10090 Source advisory: MEND:CVE-2019-10090...

Cross-Site Scripting (XSS)

jspwiki-war is vulnerable to cross-site scripting XSS. The remember parameter in preview.jsp was not handled properly to escape malicious script injection, allowing to trigger the attack through it...

Cross-site Scripting (XSS)

jspwiki-war is vulnerable to cross-site scripting XSS. The vulneability exists through the plain editor section drop-down where html is not escaped...

Cross-site Scripting in jspwiki-war

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking...