Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47736
HistoryJun 25, 2024 - 7:55 a.m.

Cross-site Scripting (XSS)

2024-06-2507:55:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
cross-site scripting
org.apache.jspwiki
jspwiki-builder
wiki.js
user input
malicious scripts
vulnerability

AI Score

6.5

Confidence

High

org.apache.jspwiki:jspwiki-builder is vulnerable to Cross-site Scripting (XSS). The vulnerability is caused by a lack of proper sanitization for the certain characters of user input within Wiki.js. This allows an attacker to potentially inject and execute malicious scripts in the context of the application.

AI Score

6.5

Confidence

High