Cross-site Scripting (XSS)

2022-08-0503:23:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

xss

jspwiki-main

weblogplugin

startday attribute

execute function

weblogplugin.java

software

EPSS

0.002

Percentile

56.1%

JSON

jspwiki-main is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the startDay attribute in the execute function of WeblogPlugin.java, allowing an attacker to inject and execute malicious javascript through the maliciously crafted WeblogPlugin request.