Security Advisory

CVE-2017-15719

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-03-12 13:00:00
Last updated 2024-09-17 02:11:55
Assigner apache
State PUBLISHED

Description

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.