Non notée
CVE-2026-66390 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Wicket 10.0 | 10.0.0 → 10.9.0 | Pas de correctif indiqué |
| Apache Wicket 9.0 | 9.0.0 → 9.23.0 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Wicket
Les 40 CVE de Apache Wicket →
CVE-2026-111089
Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes…
7.6
Élevée
CVE-2026-95863
Improper neutralization of input during web page generation in Apache Wicket
7.6
Élevée
CVE-2026-87718
Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a page whose render…
2.3
Faible
CVE-2026-84231
Improper neutralization of input during web page generation in Apache Wicket
7.4
Élevée