Description
A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Remediation
References
https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2022-28732
Related Vulnerabilities
CVE-2017-3156 Vulnerability in maven package org.apache.cxf:cxf-rt-rs-security-jose
CVE-2023-49373 Vulnerability in maven package com.jfinal:jfinal
CVE-2020-1744 Vulnerability in maven package org.keycloak:keycloak-services
CVE-2018-14042 Vulnerability in maven package org.webjars.bower:bootstrap
CVE-2020-7961 Vulnerability in maven package com.liferay.portal:portal-impl