| CVE-2026-48910 |
A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the…
|
Not rated
|
Jul 30, 2026 |
| CVE-2026-28814 |
Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain…
|
Not rated
|
Jul 30, 2026 |
| CVE-2026-28813 |
Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities
|
Not rated
|
Jul 30, 2026 |
| CVE-2026-28812 |
UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate…
|
Not rated
|
Jul 30, 2026 |
| CVE-2026-28811 |
Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3
|
Not rated
|
Jul 30, 2026 |
| CVE-2025-24854 |
A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could…
|
Not rated
|
Jul 31, 2025 |
| CVE-2025-24853 |
A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to…
|
Not rated
|
Jul 31, 2025 |
| CVE-2024-27136 |
XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser…
|
Not rated
|
Jun 24, 2024 |
| CVE-2022-46907 |
A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could…
|
Not rated
|
May 25, 2023 |
| CVE-2022-34158 |
A carefully crafted invocation on the Image plugin could trigger an CSRF vulnerability on Apache JSPWiki before…
|
Not rated
|
Aug 4, 2022 |
| CVE-2022-28732 |
A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow…
|
Not rated
|
Aug 4, 2022 |
| CVE-2022-28731 |
A carefully crafted request on UserPreferences.jsp could trigger an CSRF vulnerability on Apache JSPWiki before…
|
Not rated
|
Aug 4, 2022 |
| CVE-2022-28730 |
A carefully crafted request on AJAXPreview.jsp could trigger an XSS vulnerability on Apache JSPWiki, which could allow…
|
Not rated
|
Aug 4, 2022 |
| CVE-2022-27166 |
A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and…
|
Not rated
|
Aug 4, 2022 |
| CVE-2022-24948 |
A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the…
|
Not rated
|
Feb 25, 2022 |
| CVE-2022-24947 |
Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover
|
Not rated
|
Feb 25, 2022 |
| CVE-2021-44140 |
Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a…
|
Not rated
|
Nov 24, 2021 |
| CVE-2021-40369 |
A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Denounce…
|
Not rated
|
Nov 24, 2021 |
| CVE-2019-10078 |
A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3,…
|
Not rated
|
May 20, 2019 |
| CVE-2019-10077 |
A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which…
|
Not rated
|
May 20, 2019 |
| CVE-2019-10076 |
A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3,…
|
Not rated
|
May 20, 2019 |
| CVE-2018-20242 |
A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could…
|
Not rated
|
Feb 11, 2019 |