| Package | Affected versions | Patched versions |
|---|---|---|
| jspwiki | = 2.4.104= 2.5.139= 2.5.139_beta |
Cross-site scripting (XSS) vulnerability in Edit.jsp in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to inject arbitrary web script or HTML via the editor parameter, a different vector than CVE-2007-5120.b.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free