Lucene search

K
ApacheJspwiki

5 matches found

CVE
CVE
added 2019/09/23 3:15 p.m.75 views

CVE-2019-10087

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about th...

6.1CVSS5.9AI score0.05213EPSS
CVE
CVE
added 2019/09/23 3:15 p.m.73 views

CVE-2019-12404

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

6.1CVSS5.9AI score0.05213EPSS
CVE
CVE
added 2019/09/23 4:15 p.m.72 views

CVE-2019-10090

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

6.1CVSS5.9AI score0.05158EPSS
CVE
CVE
added 2019/09/23 3:15 p.m.67 views

CVE-2019-10089

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victi...

6.1CVSS5.9AI score0.05158EPSS
CVE
CVE
added 2019/09/23 4:15 p.m.66 views

CVE-2019-12407

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive inf...

6.1CVSS5.9AI score0.05213EPSS