CVE-2019-10090
MEDIUM 6.1EPSS 2.9%
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
- Affected
- Apache JSPWiki
- CVSS v3.1 NVD
- 6.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 2.89% chance of exploitation in the next 30 days, 87th percentile
- Published
- 2019-09-23
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
- ossf-cve-benchmark/CVE-2019-100900★ · 2020-12-08