CVE-2017-15719
N/A
Published: March 12, 2018 at 01:00 PM UTC
Updated: June 17, 2026 at 01:08 AM UTC
1 product affected across 1 vendorWicket Jquery UI
Using Wicket jQuery UI by Apache Software Foundation?
Get instant alerts when new vulnerabilities affect Wicket jQuery UI - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.9%
Description
In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 7.9.1v ≤ 8.0.0-M86.0.0 ≤ v ≤ 6.28.07.0.07.0.0 milestone37.0.0 milestone47.0.0 milestone57.0.0 milestone67.0.17.0.27.1.07.2.07.2.17.3.07.3.17.4.07.5.07.6.07.7.07.8.07.9.07.9.18.0.08.0.0 milestone18.0.0 milestone1.18.0.0 milestone28.0.0 milestone38.0.0 milestone48.0.0 milestone4.18.0.0 milestone58.0.0 milestone68.0.0 milestone78.0.0 milestone8<= 6.28.0<= 7.9.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (2)
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://openmeetings.apache.org/security.html#_toc_cve-2017-15719_-_wicket_jquery_ui_xss_in_wysiwyg_ex_refsource_CONFIRMThird Party Advisory
Source: [email protected]
https://github.com/sebfz1/wicket-jquery-ui/wiki#cve-2017-15719---xss-in-wysiwyg-editorQuick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card