Description
A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, which could allow the attacker to execute javascript in the victim-s browser and get some sensitive information about the victim. This issue affects Apache JSPWiki: through 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes the issue.
CVSS 6.5EPSS 0.348%Risk 0.67
View source- Published
- 2026-07-30 16:17:12
- Affected versions
- <2.12.4
- Type
- Web application
- Last modified
- 2026-08-05 16:49:17
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N