What’s Vulnerable › Vulnerabilities

CVE-2018-1325

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-18 · updated 2026-06-17
• Weakness: CWE-79

Description

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

Affected products

• Apache Software Foundation Wicket jQuery UI: from 6.0.0 through 6.29.0; from 7.0.1 through 7.10.1; 7.0.0, 7.0.0-milestone3, 7.0.0-milestone4, 7.0.0-milestone5, 7.0.0-milestone6, 8.0.0 (+13)

References

• https://markmail.org/message/6bxjyaolehhq7jrl
• https://markmail.org/message/6bxjyaolehhq7jrl

Get alerted when CVE-2018-1325 or the next vulnerability affects your stack