Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-24854

A carefully crafted request using the Image plugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.3 or later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.8%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2025-24854
  • Apache » Jspwiki » Version: N/A
    cpe:2.3:a:apache:jspwiki:-
  • Apache » Jspwiki » Version: 1.4.0
    cpe:2.3:a:apache:jspwiki:1.4.0
  • Apache » Jspwiki » Version: 1.5.0
    cpe:2.3:a:apache:jspwiki:1.5.0
  • Apache » Jspwiki » Version: 1.5.5
    cpe:2.3:a:apache:jspwiki:1.5.5
  • Apache » Jspwiki » Version: 1.5.7
    cpe:2.3:a:apache:jspwiki:1.5.7
  • Apache » Jspwiki » Version: 1.6.0
    cpe:2.3:a:apache:jspwiki:1.6.0
  • Apache » Jspwiki » Version: 1.6.11
    cpe:2.3:a:apache:jspwiki:1.6.11
  • Apache » Jspwiki » Version: 1.6.12
    cpe:2.3:a:apache:jspwiki:1.6.12
  • Apache » Jspwiki » Version: 1.7.0
    cpe:2.3:a:apache:jspwiki:1.7.0
  • Apache » Jspwiki » Version: 1.8.0
    cpe:2.3:a:apache:jspwiki:1.8.0
  • Apache » Jspwiki » Version: 1.8.2
    cpe:2.3:a:apache:jspwiki:1.8.2
  • Apache » Jspwiki » Version: 2.0.0
    cpe:2.3:a:apache:jspwiki:2.0.0
  • Apache » Jspwiki » Version: 2.0.14
    cpe:2.3:a:apache:jspwiki:2.0.14
  • Apache » Jspwiki » Version: 2.0.32
    cpe:2.3:a:apache:jspwiki:2.0.32
  • Apache » Jspwiki » Version: 2.0.36
    cpe:2.3:a:apache:jspwiki:2.0.36
  • Apache » Jspwiki » Version: 2.0.39
    cpe:2.3:a:apache:jspwiki:2.0.39
  • Apache » Jspwiki » Version: 2.0.45
    cpe:2.3:a:apache:jspwiki:2.0.45
  • Apache » Jspwiki » Version: 2.10.0
    cpe:2.3:a:apache:jspwiki:2.10.0
  • Apache » Jspwiki » Version: 2.10.1
    cpe:2.3:a:apache:jspwiki:2.10.1
  • Apache » Jspwiki » Version: 2.10.2
    cpe:2.3:a:apache:jspwiki:2.10.2
  • Apache » Jspwiki » Version: 2.10.3
    cpe:2.3:a:apache:jspwiki:2.10.3
  • Apache » Jspwiki » Version: 2.10.4
    cpe:2.3:a:apache:jspwiki:2.10.4
  • Apache » Jspwiki » Version: 2.10.5
    cpe:2.3:a:apache:jspwiki:2.10.5
  • Apache » Jspwiki » Version: 2.11.0
    cpe:2.3:a:apache:jspwiki:2.11.0
  • Apache » Jspwiki » Version: 2.11.1
    cpe:2.3:a:apache:jspwiki:2.11.1
  • Apache » Jspwiki » Version: 2.11.2
    cpe:2.3:a:apache:jspwiki:2.11.2
  • Apache » Jspwiki » Version: 2.11.3
    cpe:2.3:a:apache:jspwiki:2.11.3
  • Apache » Jspwiki » Version: 2.12.2
    cpe:2.3:a:apache:jspwiki:2.12.2
  • Apache » Jspwiki » Version: 2.2.13
    cpe:2.3:a:apache:jspwiki:2.2.13
  • Apache » Jspwiki » Version: 2.2.14
    cpe:2.3:a:apache:jspwiki:2.2.14
  • Apache » Jspwiki » Version: 2.2.16
    cpe:2.3:a:apache:jspwiki:2.2.16
  • Apache » Jspwiki » Version: 2.2.19
    cpe:2.3:a:apache:jspwiki:2.2.19
  • Apache » Jspwiki » Version: 2.2.20
    cpe:2.3:a:apache:jspwiki:2.2.20
  • Apache » Jspwiki » Version: 2.2.26
    cpe:2.3:a:apache:jspwiki:2.2.26
  • Apache » Jspwiki » Version: 2.2.28
    cpe:2.3:a:apache:jspwiki:2.2.28
  • Apache » Jspwiki » Version: 2.2.33
    cpe:2.3:a:apache:jspwiki:2.2.33
  • Apache » Jspwiki » Version: 2.3.50
    cpe:2.3:a:apache:jspwiki:2.3.50
  • Apache » Jspwiki » Version: 2.4.0
    cpe:2.3:a:apache:jspwiki:2.4.0
  • Apache » Jspwiki » Version: 2.4.100
    cpe:2.3:a:apache:jspwiki:2.4.100
  • Apache » Jspwiki » Version: 2.4.102
    cpe:2.3:a:apache:jspwiki:2.4.102
  • Apache » Jspwiki » Version: 2.4.103
    cpe:2.3:a:apache:jspwiki:2.4.103
  • Apache » Jspwiki » Version: 2.4.104
    cpe:2.3:a:apache:jspwiki:2.4.104
  • Apache » Jspwiki » Version: 2.4.15
    cpe:2.3:a:apache:jspwiki:2.4.15
  • Apache » Jspwiki » Version: 2.4.56
    cpe:2.3:a:apache:jspwiki:2.4.56
  • Apache » Jspwiki » Version: 2.4.69
    cpe:2.3:a:apache:jspwiki:2.4.69
  • Apache » Jspwiki » Version: 2.4.71
    cpe:2.3:a:apache:jspwiki:2.4.71
  • Apache » Jspwiki » Version: 2.4.87
    cpe:2.3:a:apache:jspwiki:2.4.87
  • Apache » Jspwiki » Version: 2.5.124
    cpe:2.3:a:apache:jspwiki:2.5.124
  • Apache » Jspwiki » Version: 2.5.139
    cpe:2.3:a:apache:jspwiki:2.5.139
  • Apache » Jspwiki » Version: 2.5.79
    cpe:2.3:a:apache:jspwiki:2.5.79
  • Apache » Jspwiki » Version: 2.5.93
    cpe:2.3:a:apache:jspwiki:2.5.93
  • Apache » Jspwiki » Version: 2.6.0
    cpe:2.3:a:apache:jspwiki:2.6.0
  • Apache » Jspwiki » Version: 2.6.1
    cpe:2.3:a:apache:jspwiki:2.6.1
  • Apache » Jspwiki » Version: 2.6.2
    cpe:2.3:a:apache:jspwiki:2.6.2
  • Apache » Jspwiki » Version: 2.6.3
    cpe:2.3:a:apache:jspwiki:2.6.3
  • Apache » Jspwiki » Version: 2.6.4
    cpe:2.3:a:apache:jspwiki:2.6.4
  • Apache » Jspwiki » Version: 2.8.0
    cpe:2.3:a:apache:jspwiki:2.8.0
  • Apache » Jspwiki » Version: 2.8.1
    cpe:2.3:a:apache:jspwiki:2.8.1
  • Apache » Jspwiki » Version: 2.8.2
    cpe:2.3:a:apache:jspwiki:2.8.2
  • Apache » Jspwiki » Version: 2.8.3
    cpe:2.3:a:apache:jspwiki:2.8.3
  • Apache » Jspwiki » Version: 2.8.4
    cpe:2.3:a:apache:jspwiki:2.8.4
  • Apache » Jspwiki » Version: 2.9.0
    cpe:2.3:a:apache:jspwiki:2.9.0
  • Apache » Jspwiki » Version: 2.9.1
    cpe:2.3:a:apache:jspwiki:2.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved