Description
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Remediation
References
https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10090
Related Vulnerabilities
CVE-2023-48219 Vulnerability in maven package org.webjars:tinymce
CVE-2022-39202 Vulnerability in npm package matrix-appservice-irc
CVE-2023-2422 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2020-2094 Vulnerability in maven package org.jenkins-ci.plugins:cloudbees-jenkins-advisor
CVE-2024-4367 Vulnerability in maven package org.webjars.npm:pdfjs-dist