CVE-2019-10089

MEDIUM6.1EPSS 4.4%

Cross-site scripting in Apache JSPWiki

Published: 10/11/2019Modified: 11/8/2023
Also known as:GHSA-3rx2-x6mx-grj3

Description

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References (2)