In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published: 2018-03-12T13:00:00Z

Updated: 2024-09-17T02:11:55.065Z

Reserved: 2017-10-21T00:00:00

Link: CVE-2017-15719

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-03-12T13:29:00.273

Modified: 2024-11-21T03:15:04.710

Link: CVE-2017-15719

cve-icon Redhat

No data.