Apache JSPWiki vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AJ

Product

Apache JSPWiki

by Apache Software Foundation · last CVE Jul 30, 2026

11

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 1High 4Medium 6Low 0

Severity

All severities11 Critical1 High4 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Apache JSPWiki to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-48910	6.5	1%	Jul 30	Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing Affected: through 2.12.3
CVE-2022-28731	6.5	59%	Aug 4	Apache JSPWiki CSRF in UserPreferences.jsp Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2022-28732	6.1	83%	Aug 4	Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2022-28730	6.1	86%	Aug 4	Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2022-27166	6.1	86%	Aug 4	XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2 Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2018-20242	6.1	5%	Feb 11	A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking Affected: prior to 2.10.5