CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Apache.
CVE
CVE-2019-10078
Severity
MEDIUM
CVSS
6.1
EPSS
4.94%
Apache
Original NVD Description
A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlugin, but further analysis showed that multiple plugins were vulnerable.
Related CVEs
Other vulnerabilities affecting the same vendor(s)