Threats tagged 'ghsa-72ww-4rcw-mc62'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.5%	CVE-2025-24854Org.apache.jspwiki:jspwiki main: Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin Medium6.1EPSS 0.5%2025-07-31GCVE DatabaseCVE-2025-24854 Apache JSPWiki versions prior to 2.12.3 contain a cross-site scripting (XSS) vulnerability in the Image plugin. This flaw allows an attacker to execute arbitrary JavaScript in the context of a victim's browser, potentially exposing sensitive information. Users are advised to upgrade to version 2.12.3 or later to remediate this issue. EPSS 0.5%Report on CVE-2025-24854 Vulnerability CWE-79 #ghsa-72ww-4rcw-mc62 #maven	GCVE Database	2025-07-31

Page 1 of 1