Cross-site Scripting in jspwiki-war

MEDIO 6.1CVE-2018-20242 · GHSA-5q75-cxcq-wr26 · Published 11/02/2019 · updated 17/06/2026

En resumen

CVE-2018-20242 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.apache.jspwiki:jspwiki-war, jspwiki (apache).
Probabilidad de explotación en los próximos 30 días (EPSS): 5.4%, mayor que el 92.7% de las vulnerabilidades.
Solución: actualizar a 2.11.0.M1 o posterior.

Package	Affected versions	Patched versions
org.apache.jspwiki:jspwiki-war Maven	`< 2.11.0.M1`	`2.11.0.M1`
jspwiki apache	`≤ 2.10.5`	No fix yet

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

NVD description

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.