| Package | Affected versions | Patched versions |
|---|---|---|
| com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent | ≥ 7.0.0, < 7.9.2≥ 8.0.0-M1, < 8.0.0-M8.1< 6.28.1 | 7.9.28.0.0-M8.16.28.1 |
| wicket-jquery-ui | = 7.0.0= 7.0.1= 7.0.2= 7.1.0= 7.2.0= 7.2.1= 7.3.0= 7.3.1= 7.4.0= 7.5.0= 7.6.0= 7.7.0= 7.8.0= 7.9.0= 7.9.1= 8.0.0≥ 6.0.0, ≤ 6.28.0≤ 7.9.1 |
In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free