Executive brief
Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering
Affected products
- Maven org.apache.jspwiki:jspwiki-markdown
- Maven org.apache.jspwiki:jspwiki-main
Junglewise Threat Intelligence
CVE-2025-24853: Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering
CVE-2025-24853 · Severity: medium · CVSS 4 · Published 2025-07-31
Technologies: org.apache.jspwiki:jspwiki-main (Maven). Vendors: Maven.
Related threats
- Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin
- Cross site scripting in Apache JSPWiki
- Apache JSPWiki vulnerable to cross-site scripting on several plugins
- Apache JSPWiki CSRF due to crafted invocation on the Image plugin
- Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp