Description
Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web script as other users via the query parameter.
References
- 20041124 STG Security Advisory: [SSA-20041122-11] JSPWiki XSS vulnerability mailing-list
- jspwiki-query-xss(18236) vdb-entry
- 11746 vdb-entry
- 13285 third-party-advisory