Skip to content
OpenAdvisories
Unscored CVE-2012-5636 EUVD-2012-5520GHSA-fw6r-27g5-6pjj

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.22, 1.5.x before 1.5.10, and 6.x before 6.4.0 might allow remote…

Published Oct 30, 2017 · Updated Aug 6, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.22, 1.5.x before 1.5.10, and 6.x before 6.4.0 might allow remote attackers to inject arbitrary web script or HTML via vectors related to <script> tags in a rendered response.

References