A carefully crafted request using the Image plugin could trigger an XSS
vulnerability on Apache JSPWiki, which could allow the attacker to
execute javascript in the victim's browser and get some sensitive
information about the victim.
Apache JSPWiki users should upgrade to 2.12.3 or later.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2025-24854 | Vendor Advisory |
Configurations
History
04 Aug 2025, 13:13
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2025-24854 - Vendor Advisory | |
| First Time |
Apache
Apache jspwiki |
|
| CPE | cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:* |
31 Jul 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
31 Jul 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-31 09:15
Updated : 2025-08-04 13:13
NVD link : CVE-2025-24854
Mitre link : CVE-2025-24854
JSON object : View
Products Affected
apache
- jspwiki
CWE
No CWE.