CVE-2018-1325

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-1325
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1325.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-1325
Aliases
Published
2018-04-18T19:29:00Z
Modified
2024-09-03T02:05:02.915668Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

In Apache wicket-jquery-ui <= 6.29.0, <= 7.10.1, <= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.

References

Affected packages

Git / github.com/sebfz1/wicket-jquery-ui

Affected ranges

Type
GIT
Repo
https://github.com/sebfz1/wicket-jquery-ui
Events
Last affected
0ac4b91214f02441d2c5cd7b9f43d4312f7f7d60
Introduced
dcb51ab95a979c336ce9db02c6df499fe8fb1b4f
Last affected
1a76d882ef644b18848909f2a78e1ef9469ddf14
Last affected
1f72799a83fc1d0b0531b8a06265e204f14c0ff0
Last affected
261bda97e77bbc23b06574969509bf53b62ef265
Last affected
27ec110466650a04592eee40baf18b81d11f5a92
Last affected
380e5e536ac678c1c31a2816614dbbd235edadba
Last affected
43a6e22a97127a6c0de2e82dc27199cc4ed88f28
Last affected
4bae4726a48ba48f6e153f4b0e46e7ef243827a6
Last affected
4f0a6dec989fd2827862ff260085af2b25c054ca
Last affected
6d34d8eff34db14ff0127187d315071967b5346e
Last affected
6e23299b7e8584f11eb59bdb881c503b761f76d0
Last affected
7451300aca8f3e621c20c26016b1f54720eebeec
Introduced
c6b20d7709583198d213611ff41e3a8b0c23c023
Last affected
7aa7fc435145bc14a6714ddd53a4b63c78c9eeb1
Last affected
93916b14c6675026c312548dd025309fe956bc3d
Last affected
9e9812701cab87a5246103043514a9c12727c746
Last affected
a258779fa13b60cadb14434aed513acb776c7ce4
Last affected
be7daa360d40c5f32f78a36ef056ab28e953d4d6
Last affected
c624024c67389bfd924b3c21c670c3e5923c9424
Last affected
d211ff0b347796f6dccc45575ac58d036da8bae9
Last affected
e4b61aeee0326657c4f9ab94a8c0d65cb818a39d
Last affected
f817324d7f0907bc3e874250c4001b42ba02da35

Affected versions

wicket-jquery-ui-7.*

wicket-jquery-ui-7.0.1
wicket-jquery-ui-7.0.2
wicket-jquery-ui-7.1.0
wicket-jquery-ui-7.10.0
wicket-jquery-ui-7.10.1
wicket-jquery-ui-7.2.0
wicket-jquery-ui-7.2.1
wicket-jquery-ui-7.3.0
wicket-jquery-ui-7.3.1
wicket-jquery-ui-7.4.0
wicket-jquery-ui-7.5.0
wicket-jquery-ui-7.6.0
wicket-jquery-ui-7.7.0
wicket-jquery-ui-7.8.0
wicket-jquery-ui-7.9.0
wicket-jquery-ui-7.9.2

wicket-jquery-ui-8.*

wicket-jquery-ui-8.0.0-M1
wicket-jquery-ui-8.0.0-M1.1
wicket-jquery-ui-8.0.0-M2
wicket-jquery-ui-8.0.0-M3

wicket-jquery-ui-parent-7.*

wicket-jquery-ui-parent-7.9.1