← CVE Intelligence

CVE-2019-10090

n/a / Apache JSPWiki PUBLISHED

Description (CNA)

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Affected (CNA)

Vendor / productVersions
n/a / Apache JSPWikiaffected Apache JSPWiki up to 2.11.0.M4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.