NetSight
medium6.1

CVE-2018-1325

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

Impact

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

Affected products

VendorProductAffected versions
Wicket-Jquery-Ui ProjectWicket-Jquery-Ui
from 6.0.0 through 6.29.0
from 7.0.1 through 7.10.1
Versions 7.0.0, 8.0.0

Weakness classification

References