Unscored CVE-2011-2712 EUVD-2011-2693GHSA-wjx9-6w47-93m3

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remot…

Published Aug 29, 2011 · Updated Aug 6, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

References

45727 third-party-advisory
1025976 vdb-entry
8357 third-party-advisory
49290 vdb-entry
http://wicket.apache.org/2011/08/23/cve-2011-2712.html
apache-wicket-multi-window-xss(69394) vdb-entry
20110823 [CVE-2011-2712] Apache Wicket XSS vulnerability mailing-list