Cross-site Scripting in jspwiki-war

MOYENNE 6.1CVE-2018-20242 · GHSA-5q75-cxcq-wr26 · Published 11/02/2019 · updated 17/06/2026

En bref

CVE-2018-20242 est une vulnérabilité MOYENNE (CVSS 6.1) touchant org.apache.jspwiki:jspwiki-war, jspwiki (apache).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 5.4%, plus élevée que 92.7% des vulnérabilités.
Correctif : mettre à jour vers 2.11.0.M1 ou plus récent.

Package	Affected versions	Patched versions
org.apache.jspwiki:jspwiki-war Maven	`< 2.11.0.M1`	`2.11.0.M1`
jspwiki apache	`≤ 2.10.5`	No fix yet

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

NVD description

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.