Lucene search
Veracode Vulnerability DatabaseVERACODE:34432HistoryFeb 28, 2022 - 8:09 a.m.
Cross-site Scripting (XSS)
2022-02-2808:09:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
57.7%
Apache JSPWiki is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization on the user preference page via the UserName variable.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache jspwiki main war | le | 2.11.1 | |
| apache jspwiki main war | le | 2.11.1 |
Related
cve
cve
CVE-2022-24948
2022-02-25 09:15:07
nvd
nvd
CVE-2022-24948
2022-02-25 09:15:07
osv
osv
CVE-2022-24948
2022-02-25 09:15:07
Cross-site Scripting in Apache JSPWiki
2022-02-26 00:00:44
cnvd
cnvd
Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2022-17019)
2022-03-01 00:00:00
prion
prion
Design/Logic Flaw
2022-02-25 09:15:00
cvelist
cvelist
github
github
Cross-site Scripting in Apache JSPWiki
2022-02-26 00:00:44
openvas
openvas
Apache JSPWiki < 2.11.2 Multiple Vulnerabilities
2022-02-25 00:00:00