CVE-2018-1325

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

Score

CVSS 3.0 6.1 Medium

Status

Modified - security@apache.org

Published

2018-04-18

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Wicket-jquery-ui (Apache Software Foundation)
• Wicket-jquery-ui (Wicket-jquery-ui Project)

References

• https://markmail.org/message/6bxjyaolehhq7jrl