# org.apache.jspwiki:jspwiki-war (Maven) vulnerabilities

11 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: not known (cve.now hasn't read this package's releases)
- Newest unaffected release: not known without release data
- Registry: https://central.sonatype.com/artifact/org.apache.jspwiki/jspwiki-war

## Advisories (11)

### [CVE-2022-46907](https://cve.now/CVE-2022-46907): Apache JSPWiki: XSS Injection points in several plugins

- Severity: Medium
- Published: May 25, 2023
- Affected: fixed in 2.12.0.

### [CVE-2019-12407](https://cve.now/CVE-2019-12407): On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache…

- Severity: Unrated
- Published: Sep 23, 2019
- Affected: fixed in 2.11.0.M5.

### [CVE-2019-10090](https://cve.now/CVE-2019-10090): On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache…

- Severity: Unrated
- Published: Sep 23, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M5.

### [CVE-2019-12404](https://cve.now/CVE-2019-12404): On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache…

- Severity: Unrated
- Published: Sep 23, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M5.

### [CVE-2019-10089](https://cve.now/CVE-2019-10089): On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache…

- Severity: Unrated
- Published: Sep 23, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M5.

### [CVE-2019-10087](https://cve.now/CVE-2019-10087): On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache…

- Severity: Unrated
- Published: Sep 23, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M5.

### [CVE-2019-10078](https://cve.now/CVE-2019-10078): A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to…

- Severity: Unrated
- Published: May 20, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M4.

### [CVE-2019-10077](https://cve.now/CVE-2019-10077): A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session…

- Severity: Unrated
- Published: May 20, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M4.

### [CVE-2019-10076](https://cve.now/CVE-2019-10076): A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to…

- Severity: Unrated
- Published: May 20, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M4.

### [CVE-2019-0225](https://cve.now/CVE-2019-0225): A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2…

- Severity: Unrated
- Published: Mar 28, 2019
- Affected: from 2.9.0, fixed in 2.11.0.M3.

### [CVE-2018-20242](https://cve.now/CVE-2018-20242): A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session…

- Severity: Unrated
- Published: Feb 11, 2019
- Affected: fixed in 2.11.0.M1.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/maven/org.apache.jspwiki:jspwiki-war
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.