Cross-Site Scripting (XSS)

org.apache.jspwiki:jspwiki-main is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters in the PARAMPAGE parameter before it output to the front end in several plugins, allowing an attacker to inject and execute malicious JavaScript on victim...