description: A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.
problem types: Cross-site scripting vulnerability
affected:
{
product: Apache JSPWiki
vendor: Apache Software Foundation
versions:
status: affected, version: Apache JSPWiki 2.9.0 to 2.11.0.M3
}