Threats tagged 'ghsa-rrff-chj9-w4c7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.6%	CVE-2025-24853Org.apache.jspwiki:jspwiki main: Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering High7.5EPSS 0.6%2025-07-31GCVE DatabaseCVE-2025-24853 Apache JSPWiki versions prior to 2.12.3 contain a Cross-Site Scripting (XSS) vulnerability that can be triggered via crafted header link markup or markdown parsing. This flaw allows attackers to execute arbitrary JavaScript in the victim's browser, potentially exposing sensitive information. The issue is fixed in version 2.12.3. EPSS 0.6%Report on CVE-2025-24853 Vulnerability CWE-79 #ghsa-rrff-chj9-w4c7 #maven	GCVE Database	2025-07-31

Page 1 of 1