GHSA-pjv3-rh6v-2pj8
Cross-site Scripting in wicket-jquery-ui
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent | < 6.29.1 | 6.29.1 |
| Maven | com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent | >= 7.0.0, < 7.10.2 | 7.10.2 |
| Maven | com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent | >= 8.0.0-M1, < 8.0.0-M9.2 | 8.0.0-M9.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
In wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.
References
External links from the advisory. They lead to third-party sites.