XSS vulnerability on Apache JSPWiki

http://artedgeek.com/wp-admin/alfacgiapi Overview :

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim’s browser and get some sensitive information about the victim.

Neuchâtel Affected Product(s) :

Apache JSPWiki up to 2.11.0.M4

Vulnerability Details :

CVE ID :	CVE-2019-12407
	Apache JSPWiki Cross-site scripting vulnerability related to the remember parameter

Solution :

Apache JSPWiki users should upgrade to 2.11.0.M5 or later.

Contact us to get started

CVE-2024-22144 : ELI SCHEETZ ANTI-MALWARE SECURITY AND BRUTE-FORCE FIREWALL PLUGIN CODE INJECTION

Description Improper Control of Generation of Code (‘Code Injection’) vulnerability in Eli Scheetz Anti-Malware Security and Brute-Force Firewall gotmls allows

Learn more