THREAT OPS › Threat News › CVE-2026-48910: Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing
CVE-2026-48910: Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing
<p>Posted by Juan Pablo Santos Rodríguez on Jul 30</p>Severity<br /> Moderate<br /> <br /> Vendor<br /> The Apache Software Foundation<br /> <br /> Versions Affected<br /> Apache JSPWiki up to 2.12.3<br /> <br /> Description<br /> A carefully crafted editing request could trigger an XSS vulnerability<br /> on Apache JSPWiki when parsing errors on the markdown renderer, which<br /> could allow the
MITRE ATT&CK techniques
- JavaScriptT1059.007
Indicators of compromise
- CVE-2026-48910cve
Original source: https://seclists.org/oss-sec/2026/q3/343