Lucene search
Veracode Vulnerability DatabaseVERACODE:21551HistorySep 23, 2019 - 6:11 a.m.
Cross-site Scripting (XSS)
2019-09-2306:11:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
55.9%
Apache JSPWiki is vulnerable to cross-site scripting (XSS). The attack is due to lack of validation of parm_renameto parameter in InfoContent.jsp, allowing an attacker to inject malicious script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache jspwiki main war | le | 2.11.0.M4 |
Related
osv
osv
CVE-2019-12404
2019-09-23 15:15:10
Cross-site scripting in Apache JSPWiki
2019-10-11 18:41:59
ubuntucve
ubuntucve
CVE-2019-12404
2019-09-23 00:00:00
nvd
nvd
CVE-2019-12404
2019-09-23 15:15:10
prion
prion
Information disclosure
2019-09-23 15:15:00
cve
cve
CVE-2019-12404
2019-09-23 15:15:10
cvelist
cvelist
CVE-2019-12404
2019-09-23 14:54:35
github
github
Cross-site scripting in Apache JSPWiki
2019-10-11 18:41:59
openvas
openvas
Apache JSPWiki < 2.11.0.M5 Multiple Vulnerabilities
2022-01-12 00:00:00