CVE-2011-2712

Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

CVE-2011-2712: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters...

PT-2011-4039

Name of the Vulnerable Software and Affected Versions Apache Wicket versions 1.4.x through 1.4.17 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters when setAutomaticMultiWindowSupport is enabled. Recommendations...

[CVE-2011-2712] Apache Wicket XSS vulnerability

Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.4.x Apache Wicket 1.3.x and 1.5-RCx are not affected Description: With multi window support application configuration and special query parameters it is possible to execute any kind of JavaScript on a si...