Apache Jspwiki vulnerabilities

• apache jspwiki Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing CVE-2026-48910 6.5 MediumJuly 30, 2026
• apache jspwiki Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering CVE-2026-28814 7.5 HighJuly 30, 2026
• apache jspwiki Apache JSPWiki: JSPWiki vulnerable to JSON hijacking CVE-2026-28813 8.8 HighJuly 30, 2026
• apache jspwiki Apache JSPWiki: UserManager does not sanity-check user database at startup CVE-2026-28812 9.8 CriticalJuly 30, 2026
• apache jspwiki Apache JSPWiki: Error Handling - Reveals Error Details CVE-2026-28811 7.5 HighJuly 30, 2026
• apache jspwiki Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin CVE-2025-24854 Fix available 6.1 MediumJuly 31, 2025
• apache jspwiki Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing CVE-2025-24853 Fix available 7.5 HighJuly 31, 2025
• apache jspwiki Apache JSPWiki: Cross-site scripting vulnerability on upload page CVE-2024-27136 Fix available EPSS 60.8% 6.1 MediumJune 24, 2024
• apache jspwiki Apache JSPWiki: XSS Injection points in several plugins CVE-2022-46907 Public exploitFix available 6.1 MediumMay 25, 2023
• apache jspwiki User Group Privilege Escalation CVE-2022-34158 Fix available 8.8 HighAugust 4, 2022
• apache jspwiki Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin CVE-2022-28732 Fix available EPSS 82.8% 6.1 MediumAugust 4, 2022
• apache jspwiki Apache JSPWiki CSRF in UserPreferences.jsp CVE-2022-28731 Fix available EPSS 58.7% 6.5 MediumAugust 4, 2022
• apache jspwiki Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp CVE-2022-28730 Fix available EPSS 86.2% 6.1 MediumAugust 4, 2022
• apache jspwiki XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 CVE-2022-27166 Fix available EPSS 86.2% 6.1 MediumAugust 4, 2022
• apache jspwiki Apache JSPWiki Cross-site scripting vulnerability on User Preferences screen CVE-2022-24948 Fix available 6.1 MediumFebruary 25, 2022
• apache jspwiki Apache JSPWiki CSRF Account Takeover CVE-2022-24947 Fix available 8.8 HighFebruary 25, 2022
• apache jspwiki Arbitrary file deletion on logout CVE-2021-44140 Fix available 9.1 CriticalNovember 24, 2021
• apache jspwiki XSS vulnerability on Denounce plugin CVE-2021-40369 Fix available 6.1 MediumNovember 24, 2021
• apache jspwiki Cross-site Scripting in Apache JSPWiki CVE-2019-12407 Fix available 6.1 MediumSeptember 23, 2019
• apache jspwiki Cross-site scripting in Apache JSPWiki CVE-2019-10090 Fix available 6.1 MediumSeptember 23, 2019
• apache jspwiki Cross-site scripting in Apache JSPWiki CVE-2019-12404 Fix available 6.1 MediumSeptember 23, 2019
• apache jspwiki Cross-site scripting in Apache JSPWiki CVE-2019-10089 Public exploitFix available 6.1 MediumSeptember 23, 2019
• apache jspwiki Cross-site scripting in Apache JSPWiki CVE-2019-10087 Fix available 6.1 MediumSeptember 23, 2019
• apache jspwiki Cross-site Scriptin in JSPWiki CVE-2019-10078 Public exploitFix available 6.1 MediumMay 20, 2019
• apache jspwiki Cross-site Scripting in JSPWiki CVE-2019-10077 Public exploitFix available 6.1 MediumMay 20, 2019
• apache jspwiki Cross-Site Scripting in JSPWiki CVE-2019-10076 Public exploitFix available 6.1 MediumMay 20, 2019
• apache jspwiki Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war CVE-2019-0225 Public exploitFix available 7.5 HighMarch 28, 2019
• apache jspwiki Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main CVE-2019-0224 Fix available 6.1 MediumMarch 28, 2019
• apache jspwiki Cross-site Scripting in jspwiki-war CVE-2018-20242 Fix available 6.1 MediumFebruary 11, 2019