PT-2025-31494 · Unknown+1 · Apache Jspwiki+1

Both Xbow

·

CVE-2025-24854

·

Published

2025-07-31

·

Updated

2025-08-04

CVSS v4.0

6.9

Medium

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Name of the Vulnerable Software and Affected Versions Apache JSPWiki versions prior to 2.12.3
Description A carefully crafted request using the Image plugin could trigger a cross-site scripting (XSS) issue on Apache JSPWiki. This could allow an attacker to execute JavaScript in the victim's browser and potentially obtain sensitive information.
Recommendations Upgrade to version 2.12.3 or later.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-24854
GHSA-72WW-4RCW-MC62

Affected Products

Apache Jspwiki
Image Plugin