Apache Software Foundation Apache JSPWiki

• CVE-2026-48910 Medium 6.5 Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing 0.6%
• CVE-2026-28814 High 7.5 Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering 0.7%
• CVE-2026-28813 High 8.8 Apache JSPWiki: JSPWiki vulnerable to JSON hijacking 0.3%
• CVE-2026-28812 Critical 9.8 Apache JSPWiki: UserManager does not sanity-check user database at startup 0.7%
• CVE-2026-28811 High 7.5 Apache JSPWiki: Error Handling - Reveals Error Details 0.8%
• CVE-2025-24854 Medium 6.1 Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin 0.5%
• CVE-2025-24853 High 7.5 Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing 0.6%
• CVE-2024-27136 Medium 6.1 Apache JSPWiki: Cross-site scripting vulnerability on upload page 60.8%
• CVE-2022-46907 Unrated Apache JSPWiki: XSS Injection points in several plugins 1.2%
• CVE-2022-34158 Unrated User Group Privilege Escalation 1.3%
• CVE-2022-28732 Unrated Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin 82.8%
• CVE-2022-28731 Unrated Apache JSPWiki CSRF in UserPreferences.jsp 58.7%
• CVE-2022-28730 Unrated Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp 86.2%
• CVE-2022-27166 Unrated XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 86.2%
• CVE-2022-24948 Unrated Apache JSPWiki Cross-site scripting vulnerability on User Preferences screen 2.3%
• CVE-2022-24947 Unrated Apache JSPWiki CSRF Account Takeover 1.2%
• CVE-2021-44140 Unrated Arbitrary file deletion on logout 6.4%
• CVE-2021-40369 Unrated XSS vulnerability on Denounce plugin 3.4%