Executive brief
Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation
Affected products
- Maven org.apache.jspwiki:jspwiki-main
Junglewise Threat Intelligence
CVE-2021-40369: Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocation
CVE-2021-40369 · Severity: low · CVSS 3.1 · Published 2021-12-02
Technologies: org.apache.jspwiki:jspwiki-main (Maven). Vendors: Maven.
Related threats
- Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering
- Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin
- Cross site scripting in Apache JSPWiki
- Apache JSPWiki vulnerable to cross-site scripting on several plugins
- Apache JSPWiki CSRF due to crafted invocation on the Image plugin