Description
In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.
Remediation
References
https://markmail.org/message/6bxjyaolehhq7jrl
Related Vulnerabilities
CVE-2023-30515 Vulnerability in maven package io.jenkins.plugins:thycotic-devops-secrets-vault
CVE-2021-4264 Vulnerability in npm package dustjs-linkedin
CVE-2021-28165 Vulnerability in maven package org.eclipse.jetty:jetty-io
CVE-2021-21292 Vulnerability in maven package org.traccar:traccar
CVE-2019-16569 Vulnerability in maven package org.jenkins-ci.plugins:mantis