Description
Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-beta allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to wiki-3/Login.jsp and unspecified other components.
References
- 25803 vdb-entry
- 20070925 JSPWiki Multiple Vulnerabilities mailing-list
- http://www.ecyrd.com/~jalkanen/JSPWiki/2.4.104/ChangeLog
- 3167 third-party-advisory
- 20070924 JSPWiki Multiple Input Validation Vulnerabilities mailing-list
- jspwiki-login-xss(36767) vdb-entry
- 26961 third-party-advisory