CVE-2019-10087

The CVE-2019-10087 issue affects Apache JSPWiki up to version 2.11.0.M4, where a carefully crafted plugin link invocation could trigger an XSS vulnerability in the Page Revision History. The vulnerability could allow an attacker to execute JavaScript in a victim’s browser and obtain some sensitiv...

CVE-2019-10090

CVE-2019-10090 affects Apache JSPWiki up to version 2.11.0.M4. The vulnerability is an XSS flaw triggered by a crafted plugin link invocation related to the plain editor, allowing an attacker to execute JavaScript in the victim’s browser and potentially view sensitive information. The available c...

CVE-2019-0224

CVE-2019-0224 affects Apache JSPWiki versions 2.9.0 to 2.11.0.M2. The vulnerability allows a crafted URL to execute JavaScript in the user’s own browser session. The provided sources describe the impact as client-side (no server/database writes and no cross-user script execution stated). The exac...

CVE-2019-12404

CVE-2019-12404 affects Apache JSPWiki up to version 2.11.0.M4; OpenVAS notes vulnerability in

CVE-2019-10089

CVE-2019-10089 affects Apache JSPWiki up to version 2.11.0.M4. A crafted plugin link invocation related to the WYSIWYG editor can trigger an XSS vulnerability, allowing the attacker to execute JavaScript in a victim’s browser and access some sensitive information. No remediation details are provi...

CVE-2019-12407

This CVE affects Apache JSPWiki up to version 2.11.0.M4. The vulnerability is an XSS flaw triggered by a crafted plugin link invocation related to the remember parameter on certain JSPs, allowing an attacker to execute JavaScript in a victim’s browser and access some sensitive information. The co...

CVE-2018-20242

This CVE affects Apache JSPWiki up to version 2.10.5, where a crafted URL could trigger a cross-site scripting (XSS) vulnerability. The described impact is potential session hijacking. The connected documents consistently identify JSPWiki as the affected product and the vulnerability type as XSS,...