CVE-2015-7520

published 2016-04-12

CVE-2015-7520: Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Multiple cross-site scripting (XSS) vulnerabilities in the (1) RadioGroup and (2) CheckBoxMultipleChoice classes in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 allow remote attackers to inject arbitrary web script or HTML via a crafted "value" attribute in a element.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
apache	wicket	>= 1.5.0 < 1.5.15	1.5.15
apache	wicket	>= 6.0.0 < 6.22.0	6.22.0
apache	wicket	>= 7.0.0 < 7.2.0	7.2.0

CWE-79