JS
Product
Jspwiki
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 20Low 0
Watch
Add Jspwiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48910 | 6.5 | Jul 30 | Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing Affected: before 2.12.4 |
| CVE-2022-28731 | 6.5 | Aug 4 | Apache JSPWiki CSRF in UserPreferences.jsp Affected: before 2.11.3 |
| CVE-2025-24854 | 6.1 | Jul 31 | Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin Affected: before 2.12.3 |
| CVE-2024-27136 | 6.1 | Jun 24 | Apache JSPWiki: Cross-site scripting vulnerability on upload page Affected: before 2.12.2 |
| CVE-2022-46907 | 6.1 | May 25 | A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's… Affected: before 2.12.0 |
| CVE-2022-28732 | 6.1 | Aug 4 | Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin Affected: before 2.11.3 |
| CVE-2022-28730 | 6.1 | Aug 4 | Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp Affected: before 2.11.3 |
| CVE-2022-27166 | 6.1 | Aug 4 | XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 Affected: before 2.11.3 |
| CVE-2022-24948 | 6.1 | Feb 25 | A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the user preferences screen, which could allow the attacker to… Affected: before 2.11.2 |
| CVE-2021-40369 | 6.1 | Nov 24 | A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce plugin, which could allow the attacker to execute… Affected: before 2.11.0 |
| CVE-2019-12407 | 6.1 | Sep 23 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on… Affected: through 2.10.5; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +7 more |
| CVE-2019-10090 | 6.1 | Sep 23 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which… Affected: through 2.10.5; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +7 more |
| CVE-2019-12404 | 6.1 | Sep 23 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which… Affected: through 2.10.5; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +7 more |
| CVE-2019-10089 | 6.1 | Sep 23 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which… Affected: through 2.10.5; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +7 more |
| CVE-2019-10087 | 6.1 | Sep 23 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History,… Affected: through 2.10.5; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +7 more |
| CVE-2019-10078 | 6.1 | May 20 | A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking Affected: 2.9.0 through 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +1 more |
| CVE-2019-10077 | 6.1 | May 20 | A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking Affected: 2.9.0 through 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +1 more |
| CVE-2019-10076 | 6.1 | May 20 | A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking Affected: 2.9.0 through 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +1 more |
| CVE-2019-0224 | 6.1 | Mar 28 | In Apache JSPWiki 2.9.0 to 2.11.0.M2, a carefully crafted URL could execute javascript on another user's session Affected: 2.9.0 through 2.10.5; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +1 more |
| CVE-2018-20242 | 6.1 | Feb 11 | A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking Affected: through 2.10.5 |
Showing 20