CVE-2012-5636

Published: Oct 30, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.22, 1.5.x before 1.5.10, and 6.x before 6.4.0 might allow remote attackers to inject arbitrary web script or HTML via vectors related to <script> tags in a rendered response.

Affected (37)

Products: Apache: Wicket

Apache

1 product

Wicket

Configuration A

37 vulnerable

Vulnerable Software	Affected Versions
Apache Wicket	Version 1.4.0
Apache Wicket	Version 1.4.10
Apache Wicket	Version 1.4.11
Apache Wicket	Version 1.4.12
Apache Wicket	Version 1.4.13
Apache Wicket	Version 1.4.14
Apache Wicket	Version 1.4.15
Apache Wicket	Version 1.4.16
Apache Wicket	Version 1.4.17
Apache Wicket	Version 1.4.18
Apache Wicket	Version 1.4.19
Apache Wicket	Version 1.4.1
Apache Wicket	Version 1.4.20
Apache Wicket	Version 1.4.21
Apache Wicket	Version 1.4.2
Apache Wicket	Version 1.4.3
Apache Wicket	Version 1.4.4
Apache Wicket	Version 1.4.5
Apache Wicket	Version 1.4.6
Apache Wicket	Version 1.4.7
Apache Wicket	Version 1.4.8
Apache Wicket	Version 1.4.9
Apache Wicket	Version 1.5.0
Apache Wicket	Version 1.5.1
Apache Wicket	Version 1.5.2
Apache Wicket	Version 1.5.3
Apache Wicket	Version 1.5.4
Apache Wicket	Version 1.5.5
Apache Wicket	Version 1.5.6
Apache Wicket	Version 1.5.7
Apache Wicket	Version 1.5.8
Apache Wicket	Version 1.5.9
Apache Wicket	Version 6.0.0
Apache Wicket	Version 6.1.0
Apache Wicket	Version 6.1.1
Apache Wicket	Version 6.2.0
Apache Wicket	Version 6.3.0