Jspwiki

This hub aggregates every CVE we track for Jspwiki, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Jspwiki.

• CVE-2025-24854Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin6.1Jul 31, 2025
• CVE-2025-24853Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing7.5Jul 31, 2025
• CVE-2024-27136Apache JSPWiki: Cross-site scripting vulnerability on upload page6.1Jun 24, 2024
• CVE-2022-46907Apache JSPWiki: XSS Injection points in several plugins6.1May 25, 2023
• CVE-2022-34158User Group Privilege Escalation8.8Aug 4, 2022
• CVE-2022-28732Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin6.1Aug 4, 2022
• CVE-2022-28731Apache JSPWiki CSRF in UserPreferences.jsp6.5Aug 4, 2022
• CVE-2022-28730Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp6.1Aug 4, 2022
• CVE-2022-27166XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.26.1Aug 4, 2022
• CVE-2022-24948Apache JSPWiki Cross-site scripting vulnerability on User Preferences screen6.1Feb 25, 2022
• CVE-2022-24947Apache JSPWiki CSRF Account Takeover8.8Feb 25, 2022
• CVE-2021-44140Arbitrary file deletion on logout9.1Nov 24, 2021
• CVE-2021-40369XSS vulnerability on Denounce plugin6.1Nov 24, 2021
• CVE-2019-12407On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, w...6.1Sep 23, 2019
• CVE-2019-10090On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attac...6.1Sep 23, 2019