Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21552
HistorySep 23, 2019 - 6:21 a.m.

Cross-site Scripting (XSS)

2019-09-2306:21:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.002 Low

EPSS

Percentile

56.1%

jspwiki-main is vulnerable to cross-site scripting (XSS). The vulnerability exists as the value of title and rootname are not sanitized in org/apache/wiki/plugin/ReferredPagesPlugin.java.

CPENameOperatorVersion
apache jspwiki main jarle2.11.0.M3

0.002 Low

EPSS

Percentile

56.1%