cve/2011/CVE-2011-2712.md
2024-05-26 14:27:05 +02:00

719 B

CVE-2011-2712

Description

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

POC

Reference

No PoCs from references.

Github