← CVE Intelligence

CVE-2022-27166

XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 PUBLISHED

Description (CNA)

A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache JSPWikiaffected Apache JSPWiki through Apache JSPWiki up to 2.11.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.