Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a <input> element.
References
Link | Resource |
---|---|
http://wicket.apache.org/news/2016/03/02/cve-2015-7520.html | Vendor Advisory |
http://www.securitytracker.com/id/1035166 | Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2016-04-12T17:00:00
Updated: 2016-04-12T16:57:01
Reserved: 2015-09-29T00:00:00
Link: CVE-2015-7520
JSON object: View
NVD Information
Status : Analyzed
Published: 2016-04-12T17:59:01.217
Modified: 2019-02-13T21:20:00.883
Link: CVE-2015-7520
JSON object: View
Redhat Information
No data.
CWE