Executive brief
Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369
Affected products
- Maven org.apache.jspwiki:jspwiki-main
Junglewise Threat Intelligence
CVE-2022-28730: Apache JSPWiki XSS due to incomplete patch for
CVE-2022-28730 · Severity: low · CVSS 3.1 · Published 2022-08-05
Technologies: org.apache.jspwiki:jspwiki-main (Maven). Vendors: Maven.
Related threats
- Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering
- Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin
- Cross site scripting in Apache JSPWiki
- Apache JSPWiki vulnerable to cross-site scripting on several plugins
- Apache JSPWiki CSRF due to crafted invocation on the Image plugin