Apache jspwiki

This hub aggregates every CVE we track for Apache jspwiki, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Apache jspwiki.

• CVE-2026-48910Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing6.5Jul 30, 2026
• CVE-2026-28814Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering7.5Jul 30, 2026
• CVE-2026-28813Apache JSPWiki: JSPWiki vulnerable to JSON hijacking8.8Jul 30, 2026
• CVE-2026-28812Apache JSPWiki: UserManager does not sanity-check user database at startup9.8Jul 30, 2026
• CVE-2026-28811Apache JSPWiki: Error Handling - Reveals Error Details7.5Jul 30, 2026
• CVE-2025-24854Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin6.1Jul 31, 2025
• CVE-2025-24853Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing7.5Jul 31, 2025
• CVE-2024-27136Apache JSPWiki: Cross-site scripting vulnerability on upload page6.1Jun 24, 2024
• CVE-2022-46907Apache JSPWiki: XSS Injection points in several plugins6.1May 25, 2023
• CVE-2022-34158User Group Privilege Escalation8.8Aug 4, 2022
• CVE-2022-28732Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin6.1Aug 4, 2022
• CVE-2022-28731Apache JSPWiki CSRF in UserPreferences.jsp6.5Aug 4, 2022
• CVE-2022-28730Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp6.1Aug 4, 2022
• CVE-2022-27166XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.26.1Aug 4, 2022
• CVE-2022-24948Apache JSPWiki Cross-site scripting vulnerability on User Preferences screen6.1Feb 25, 2022