CVE-2012-0047

Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the wicket:pageMapName parameter...

CVE-2012-0047

The CVE affects Apache Wicket 1.4.x, vulnerable to XSS via the wicket:pageMapName request parameter. The root cause is improper handling of this parameter, enabling remote script/HTML injection. Affected versions: 1.4.x prior to 1.4.20. The vulnerability is mitigated by upgrading to Apache Wicket...

PT-2012-2264

Name of the Vulnerable Software and Affected Versions Apache Wicket versions 1.4.x through 1.4.19 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the wicket:pageMapName parameter. This enables attackers to execute malicious scripts o...

CVE-2012-0047: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the wicket:pageMapName parameter...