What’s Vulnerable › Products
Apache Software Foundation Apache JSPWiki vulnerabilities
29 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your Apache Software Foundation Apache JSPWiki version is affected
Latest Apache Software Foundation Apache JSPWiki vulnerabilities
- CVE-2026-48910 — Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing (CVSS 6.5)
- CVE-2026-28814 — Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering (CVSS 7.5)
- CVE-2026-28813 — Apache JSPWiki: JSPWiki vulnerable to JSON hijacking (CVSS 8.8)
- CVE-2026-28812 — Apache JSPWiki: UserManager does not sanity-check user database at startup (CVSS 9.8)
- CVE-2026-28811 — Apache JSPWiki: Error Handling - Reveals Error Details (CVSS 7.5)
- CVE-2025-24854 — Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin (CVSS 6.1)
- CVE-2025-24853 — Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing (CVSS 7.5)
- CVE-2024-27136 — Apache JSPWiki: Cross-site scripting vulnerability on upload page (CVSS 6.1)
- CVE-2022-46907 — Apache JSPWiki: XSS Injection points in several plugins (CVSS 6.1)
- CVE-2022-34158 — User Group Privilege Escalation (CVSS 8.8)
- CVE-2022-28732 — Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin (CVSS 6.1)
- CVE-2022-28731 — Apache JSPWiki CSRF in UserPreferences.jsp (CVSS 6.5)
- CVE-2022-28730 — Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp (CVSS 6.1)
- CVE-2022-27166 — XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 (CVSS 6.1)
- CVE-2022-24948 — Apache JSPWiki Cross-site scripting vulnerability on User Preferences screen (CVSS 6.1)
- CVE-2022-24947 — Apache JSPWiki CSRF Account Takeover (CVSS 8.8)
- CVE-2021-44140 — Arbitrary file deletion on logout (CVSS 9.1)
- CVE-2021-40369 — XSS vulnerability on Denounce plugin (CVSS 6.1)
- CVE-2019-12407 — (CVSS 6.1)
- CVE-2019-10090 — (CVSS 6.1)
- CVE-2019-12404 — (CVSS 6.1)
- CVE-2019-10089 — (CVSS 6.1)
- CVE-2019-10087 — (CVSS 6.1)
- CVE-2019-10078 — (CVSS 6.1)
- CVE-2019-10077 — (CVSS 6.1)