{"id":"CVE-2018-1325","details":"In Apache wicket-jquery-ui \u003c= 6.29.0, \u003c= 7.10.1, \u003c= 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display.","aliases":["GHSA-pjv3-rh6v-2pj8"],"modified":"2026-07-08T14:14:26.985503Z","published":"2018-04-18T19:29:00.893Z","references":[{"type":"ADVISORY","url":"https://markmail.org/message/6bxjyaolehhq7jrl"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sebfz1/wicket-jquery-ui","events":[{"introduced":"dcb51ab95a979c336ce9db02c6df499fe8fb1b4f"},{"last_affected":"1a76d882ef644b18848909f2a78e1ef9469ddf14"},{"introduced":"c6b20d7709583198d213611ff41e3a8b0c23c023"},{"last_affected":"7aa7fc435145bc14a6714ddd53a4b63c78c9eeb1"},{"introduced":"be7daa360d40c5f32f78a36ef056ab28e953d4d6"},{"last_affected":"4f0a6dec989fd2827862ff260085af2b25c054ca"}],"database_specific":{"cpe":["cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:*:*:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:-:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone3:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone4:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone5:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:7.0.0:milestone6:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:-:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone1.1:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone2:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone3:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone4.1:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone5:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone6:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone7:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone8:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone8.1:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone9:*:*:*:*:*:*","cpe:2.3:a:wicket-jquery-ui_project:wicket-jquery-ui:8.0.0:milestone9.1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0.0"},{"last_affected":"6.29.0"},{"introduced":"7.0.1"},{"last_affected":"7.10.1"},{"introduced":"7.0.0-NA"},{"last_affected":"7.0.0-NA"},{"introduced":"7.0.0-milestone3"},{"last_affected":"7.0.0-milestone3"},{"introduced":"7.0.0-milestone4"},{"last_affected":"7.0.0-milestone4"},{"introduced":"7.0.0-milestone5"},{"last_affected":"7.0.0-milestone5"},{"introduced":"7.0.0-milestone6"},{"last_affected":"7.0.0-milestone6"},{"introduced":"8.0.0-NA"},{"last_affected":"8.0.0-NA"},{"introduced":"8.0.0-milestone1"},{"last_affected":"8.0.0-milestone1"},{"introduced":"8.0.0-milestone1\\.1"},{"last_affected":"8.0.0-milestone1\\.1"},{"introduced":"8.0.0-milestone2"},{"last_affected":"8.0.0-milestone2"},{"introduced":"8.0.0-milestone3"},{"last_affected":"8.0.0-milestone3"},{"introduced":"8.0.0-milestone4"},{"last_affected":"8.0.0-milestone4"},{"introduced":"8.0.0-milestone4\\.1"},{"last_affected":"8.0.0-milestone4\\.1"},{"introduced":"8.0.0-milestone5"},{"last_affected":"8.0.0-milestone5"},{"introduced":"8.0.0-milestone6"},{"last_affected":"8.0.0-milestone6"},{"introduced":"8.0.0-milestone7"},{"last_affected":"8.0.0-milestone7"},{"introduced":"8.0.0-milestone8"},{"last_affected":"8.0.0-milestone8"},{"introduced":"8.0.0-milestone8\\.1"},{"last_affected":"8.0.0-milestone8\\.1"},{"introduced":"8.0.0-milestone9"},{"last_affected":"8.0.0-milestone9"},{"introduced":"8.0.0-milestone9\\.1"},{"last_affected":"8.0.0-milestone9\\.1"}],"source":["CPE_RANGE","CPE_STRING"]}}],"versions":["7.0.0-NA","7.0.0-milestone3","7.0.0-milestone4","7.0.0-milestone5","7.0.0-milestone6","8.0.0-NA","8.0.0-milestone1","8.0.0-milestone1\\.1","8.0.0-milestone2","8.0.0-milestone3","8.0.0-milestone4","8.0.0-milestone4\\.1","8.0.0-milestone5","8.0.0-milestone6","8.0.0-milestone7","8.0.0-milestone8","8.0.0-milestone8\\.1","8.0.0-milestone9","8.0.0-milestone9\\.1","wicket-jquery-ui-7.10.1","wicket-jquery-ui-8.0.0-M9.1","wicket-jquery-ui-7.10.0","wicket-jquery-ui-8.0.0-M9","wicket-jquery-ui-7.9.2","wicket-jquery-ui-8.0.0-M8.1","wicket-jquery-ui-parent-7.9.1","wicket-jquery-ui-8.0.0-M8","wicket-jquery-ui-7.9.0","wicket-jquery-ui-8.0.0-M7","wicket-jquery-ui-7.8.0","wicket-jquery-ui-7.7.0","wicket-jquery-ui-8.0.0-M6","wicket-jquery-ui-8.0.0-M5","wicket-jquery-ui-8.0.0-M4.1","wicket-jquery-ui-8.0.0-M4","wicket-jquery-ui-7.6.0","wicket-jquery-ui-8.0.0-M3","wicket-jquery-ui-7.5.0","wicket-jquery-ui-8.0.0-M2","wicket-jquery-ui-8.0.0-M1.1","wicket-jquery-ui-7.4.0","wicket-jquery-ui-8.0.0-M1","wicket-jquery-ui-7.3.1","wicket-jquery-ui-7.3.0","wicket-jquery-ui-7.2.1","wicket-jquery-ui-7.2.0","wicket-jquery-ui-7.1.0","wicket-jquery-ui-7.0.2","wicket-jquery-ui-7.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-1325.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}