Executive brief
Apache JSPWiki vulnerable to cross-site scripting on several plugins
Affected products
- Maven org.apache.jspwiki:jspwiki-war
- Maven org.apache.jspwiki:jspwiki-main
Junglewise Threat Intelligence
CVE-2022-46907: Apache JSPWiki vulnerable to cross-site scripting on several plugins
CVE-2022-46907 · Severity: low · CVSS 3.1 · Published 2023-05-25
Technologies: org.apache.jspwiki:jspwiki-war (Maven), org.apache.jspwiki:jspwiki-main (Maven). Vendors: Maven.
Related threats
- Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering
- Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin
- Cross site scripting in Apache JSPWiki
- Apache JSPWiki CSRF due to crafted invocation on the Image plugin
- Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp