All products

org.apache.jspwiki:jspwiki-main

Maven · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link RenderingCVE-2025-24853 · GHSA-RRFF-CHJ9-W4C7 org.apache.jspwiki:jspwiki-mainorg.apache.jspwiki:jspwiki-markdown Maven Medium Fix reported
Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image PluginCVE-2025-24854 · GHSA-72WW-4RCW-MC62 org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Cross site scripting in Apache JSPWikiCVE-2024-27136 · GHSA-36GF-VPJ2-J42W org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Apache JSPWiki vulnerable to cross-site scripting on several pluginsCVE-2022-46907 · GHSA-QVQ8-CW7F-M7M4 org.apache.jspwiki:jspwiki-mainorg.apache.jspwiki:jspwiki-war Maven Medium Fix reported
Cross-site Scripting in Apache JSPWikiCVE-2019-12407 · GHSA-P2R4-RPJ8-M2P9 org.apache.jspwiki:jspwiki-mainorg.apache.jspwiki:jspwiki-war Maven Medium Fix reported
Apache JSPWiki CSRF due to crafted invocation on the Image pluginCVE-2022-34158 · GHSA-JP3M-P26H-MM7V org.apache.jspwiki:jspwiki-main Maven High Fix reported
Apache JSPWiki CSRF due to crafted request on UserPreferences.jspCVE-2022-28731 · GHSA-9X9J-VRHJ-V364 org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Apache JSPWiki XSS due to incomplete patch for CVE-2021-40369CVE-2022-28730 · GHSA-GGJQ-8C4C-68R5 org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Apache JSPWiki XSS due to crafted request in WeblogPluginCVE-2022-28732 · GHSA-HPH8-29XW-QFXX org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jspCVE-2022-27166 · GHSA-2FXF-QJ94-3F83 org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Cross-site Scripting in Apache JSPWikiCVE-2022-24948 · GHSA-9953-FMRW-V4VM org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Cross Site Request Forgery in Apache JSPWikiCVE-2022-24947 · GHSA-4284-X26R-4HHC org.apache.jspwiki:jspwiki-main Maven High Fix reported
Incorrect Default Permissions in Apache JSPWikiCVE-2021-44140 · GHSA-8GW6-W5RW-4G5C org.apache.jspwiki:jspwiki-main Maven Critical Fix reported
Apache JSPWiki Cross-site Scripting due to carefully crafted plugin link invocationCVE-2021-40369 · GHSA-CFQJ-9G2G-W7Q6 org.apache.jspwiki:jspwiki-main Maven Medium Fix reported
Cross-site Scripting in JSPWikiCVE-2019-10077 · GHSA-CJ6J-32RG-45R2 org.apache.jspwiki:jspwiki-mainorg.apache.jspwiki:jspwiki-war Maven Medium Fix reported
Cross-site Scriptin in JSPWikiCVE-2019-10078 · GHSA-HP5R-MHGP-56C9 org.apache.jspwiki:jspwiki-mainorg.apache.jspwiki:jspwiki-war Maven Medium Fix reported
Cross-Site Scripting in JSPWikiCVE-2019-10076 · GHSA-CXX2-FP39-RF3R org.apache.jspwiki:jspwiki-mainorg.apache.jspwiki:jspwiki-war Maven Medium Fix reported
Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-mainCVE-2019-0224 · GHSA-FMPQ-W5Q6-9VF9 org.apache.jspwiki:jspwiki-main Maven Medium Fix reported