Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Apache JSPWiki — Vulnerabilities & Security Advisories 29

All 29 CVE vulnerabilities found in Apache JSPWiki, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the Apache JSPWiki web-based wiki software, categorized by vulnerability type and vendor advisory status. The collection encompasses a wide spectrum of flaws including cross-site scripting, server-side request forgery, and information disclosure issues reported across multiple major releases from the product's inception through recent updates. Readers can utilize this resource to track official vendor advisories for Apache JSPWiki, understand the characteristics of specific weakness classes prevalent in Java-based wiki applications, or review the complete historical vulnerability record for this product to assess legacy system risks. The data presented here serves as a centralized reference for security professionals, system administrators, and developers seeking to identify and remediate potential threats within their wiki deployments. By consolidating disparate reports into a single view, this aggregation facilitates comprehensive risk analysis and supports the development of targeted mitigation strategies for organizations relying on Apache JSPWiki infrastructure. The information remains strictly factual and derived from public security bulletins and vulnerability databases without commercial endorsement or promotional content.

Vendor: Apache Software Foundation

CVE ID Title CVSS Severity Published
CVE-2026-48910 Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing CWE-80 - - 2026-07-30
CVE-2026-28814 Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering - - 2026-07-30
CVE-2026-28813 Apache JSPWiki: JSPWiki vulnerable to JSON hijacking CWE-352 - - 2026-07-30
CVE-2026-28812 Apache JSPWiki: UserManager does not sanity-check user database at startup - - 2026-07-30
CVE-2026-28811 Apache JSPWiki: Error Handling - Reveals Error Details CWE-1295 - - 2026-07-30
CVE-2025-24854 Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin CWE-79 6.1AI Medium AI 2025-07-31
CVE-2025-24853 Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing CWE-79 4.7AI Medium AI 2025-07-31
CVE-2024-27136 Apache JSPWiki: Cross-site scripting vulnerability on upload page CWE-79 6.1AI Medium AI 2024-06-24
CVE-2022-46907 Apache JSPWiki: XSS Injection points in several plugins CWE-79 6.1 - 2023-05-25
CVE-2022-34158 User Group Privilege Escalation 8.8 - 2022-08-04
CVE-2022-28732 Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin 6.1 - 2022-08-04
CVE-2022-28731 Apache JSPWiki CSRF in UserPreferences.jsp 8.8 - 2022-08-04
CVE-2022-28730 Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp 6.1 - 2022-08-04
CVE-2022-27166 XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 6.1 - 2022-08-04
CVE-2022-24948 Apache JSPWiki Cross-site scripting vulnerability on User Preferences screen 6.1 - 2022-02-25
CVE-2022-24947 Apache JSPWiki CSRF Account Takeover 8.8 - 2022-02-25
CVE-2021-44140 Arbitrary file deletion on logout 9.1 - 2021-11-24
CVE-2021-40369 XSS vulnerability on Denounce plugin 6.1 - 2021-11-24
CVE-2019-12407 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-09-23
CVE-2019-10090 Apache JSPWiki plain editor 跨站脚本漏洞 6.1 - 2019-09-23
CVE-2019-12404 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-09-23
CVE-2019-10089 Apache JSPWiki WYSIWYG editor 跨站脚本漏洞 6.1 - 2019-09-23
CVE-2019-10087 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-09-23
CVE-2019-10078 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-05-20
CVE-2019-10077 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-05-20
CVE-2019-10076 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-05-20
CVE-2019-0225 Apache JSPWiki 路径遍历漏洞 5.3 - 2019-03-28
CVE-2019-0224 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-03-28
CVE-2018-20242 Apache JSPWiki 跨站脚本漏洞 6.1 - 2019-02-11

All 29 known CVE vulnerabilities affecting Apache JSPWiki with full Chinese analysis, references, and POCs where available.