Cross-site Scripting (XSS)

2022-08-0507:24:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

vulnerability

execute function

denounce.java

uris

attacker

sensitive information

software

EPSS

0.002

Percentile

56.1%

JSON

org.apache.jspwiki:jspwiki is vulnerable to cross-site scripting. The vulnerability exists in execute function in Denounce.java because the Denounce’s link parameter URIs are not properly validated which allows an attacker to inject and execute a specifically crafted link parameter to gain access to sensitive information.