What is GHSA-g956-w8r6-2m72?

GHSA-g956-w8r6-2m72 is a security advisory published by GitHub Security Advisories with Medium severity. A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when...

Which CVE IDs does GHSA-g956-w8r6-2m72 cover?

GHSA-g956-w8r6-2m72 covers the following CVE IDs: CVE-2026-48910. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g956-w8r6-2m72?

GHSA-g956-w8r6-2m72 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-g956-w8r6-2m72MediumCVSS 6.5

A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when...

Vendor

GitHub Security Advisories

Published

July 30, 2026

Last Modified

July 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-48910 →

📋 Description

A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

This issue affects Apache JSPWiki: through 2.12.3.

Users are recommended to upgrade to version 2.12.4, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-48910
https://lists.apache.org/thread/yvbdjnocw5qq3xkbjs9h77ghlg0bsw2c
http://www.openwall.com/lists/oss-security/2026/07/30/18
https://github.com/advisories/GHSA-g956-w8r6-2m72