GHSA-pwpc-hqq2-hx2xMediumCVSS 6.1

Cross-site Scripting in wicket-jquery-ui

Published
May 14, 2022
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2017-15719 →

📋 Description

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.

🎯 Affected products3

  • maven/com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent:< 6.28.1
  • maven/com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent:>= 7.0.0, < 7.9.2
  • maven/com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent:>= 8.0.0-M1, < 8.0.0-M8.1

🔗 References (4)