Apache / Jspwiki
29 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-48910 | Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing | MEDIUM | 6.5 | Jul 30, 2026 |
| CVE-2026-28814 | Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering | HIGH | 7.5 | Jul 30, 2026 |
| CVE-2026-28813 | Apache JSPWiki: JSPWiki vulnerable to JSON hijacking | HIGH | 8.8 | Jul 30, 2026 |
| CVE-2026-28812 | Apache JSPWiki: UserManager does not sanity-check user database at startup | CRITICAL | 9.8 | Jul 30, 2026 |
| CVE-2026-28811 | Apache JSPWiki: Error Handling - Reveals Error Details | HIGH | 7.5 | Jul 30, 2026 |
| CVE-2025-24854 | Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin | MEDIUM | 6.9 | Jul 31, 2025 |
| CVE-2025-24853 | Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing | MEDIUM | 6.9 | Jul 31, 2025 |
| CVE-2024-27136 | Apache JSPWiki: Cross-site scripting vulnerability on upload page | MEDIUM | 5.3 | Jun 24, 2024 |
| CVE-2022-46907 | Apache JSPWiki: XSS Injection points in several plugins | MEDIUM | 6.1 | May 25, 2023 |
| CVE-2022-34158 | User Group Privilege Escalation | HIGH | 8.8 | Aug 4, 2022 |
| CVE-2022-28732 | Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin | MEDIUM | 6.1 | Aug 4, 2022 |
| CVE-2022-28731 | Apache JSPWiki CSRF in UserPreferences.jsp | MEDIUM | 6.5 | Aug 4, 2022 |
| CVE-2022-28730 | Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp | MEDIUM | 6.1 | Aug 4, 2022 |
| CVE-2022-27166 | XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 | MEDIUM | 6.1 | Aug 4, 2022 |
| CVE-2022-24948 | Apache JSPWiki Cross-site scripting vulnerability on User Preferences screen | MEDIUM | 6.1 | Feb 25, 2022 |
| CVE-2022-24947 | Apache JSPWiki CSRF Account Takeover | HIGH | 8.8 | Feb 25, 2022 |
| CVE-2021-44140 | Arbitrary file deletion on logout | CRITICAL | 9.1 | Nov 24, 2021 |
| CVE-2021-40369 | XSS vulnerability on Denounce plugin | MEDIUM | 6.1 | Nov 24, 2021 |
| CVE-2019-12407 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the rem… | MEDIUM | 6.1 | Sep 23, 2019 |
| CVE-2019-10090 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the pla… | MEDIUM | 6.1 | Sep 23, 2019 |
| CVE-2019-12404 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoCon… | MEDIUM | 6.1 | Sep 23, 2019 |
| CVE-2019-10089 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYS… | MEDIUM | 6.1 | Sep 23, 2019 |
| CVE-2019-10087 | On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Pag… | MEDIUM | 6.1 | Sep 23, 2019 |
| CVE-2019-10078 | A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Init… | MEDIUM | 6.1 | May 20, 2019 |
| CVE-2019-10077 | A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. | MEDIUM | 6.1 | May 20, 2019 |
Showing 1 to 25 of 29 CVEs