Lucene search
Veracode Vulnerability DatabaseVERACODE:21553HistorySep 23, 2019 - 6:28 a.m.
Cross-site Scripting (XSS)
2019-09-2306:28:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
55.9%
jspwiki-main is vulnerable to cross-site scripting (XSS). The vulnerability exists because it does not properly escape HTML entities in JSPWiki WYSIWYG editor, allowing an attacker to inject malicious script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache jspwiki main jar | le | 2.11.0.M4 |
Related
prion
prion
Information disclosure
2019-09-23 15:15:00
osv
osv
CVE-2019-10089
2019-09-23 15:15:00
Cross-site scripting in Apache JSPWiki
2019-10-11 18:41:54
ubuntucve
ubuntucve
CVE-2019-10089
2019-09-23 00:00:00
cve
cve
CVE-2019-10089
2019-09-23 15:15:10
github
github
Cross-site scripting in Apache JSPWiki
2019-10-11 18:41:54
cvelist
cvelist
CVE-2019-10089
2019-09-23 14:51:02
nvd
nvd
CVE-2019-10089
2019-09-23 15:15:10
openvas
openvas
Apache JSPWiki < 2.11.0.M5 Multiple Vulnerabilities
2022-01-12 00:00:00