fr Sign in

Not rated

CVE-2018-1325 In Apache…

Description

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

Affected products and versions

Product	Affected versions	Fixed in
wicket-jquery-ui	Versions not published

References

[openmeetings-user] 20180418 [ANNOUNCE] CVE-2018-1325 - Wicket jQuery UI: XSS while displaying value in WYSIWYG editor markmail.org

Timeline

Published April 18, 2018
Last modified September 16, 2024

Track this CVE