{"action":"Upgrade com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent to 6.28.1 (6.x), 7.9.2 (7.x) or 8.0.0-M8.1 (8.x) or later.","affected":[{"fixed":"6.28.1","introduced":"0"},{"fixed":"7.9.2","introduced":"7.0.0"},{"fixed":"8.0.0-M8.1","introduced":"8.0.0-M1"}],"component":"com.googlecode.wicket-jquery-ui:wicket-jquery-ui-parent","cve_ids":["CVE-2017-15719"],"ecosystem":"Maven","epss":0.00874,"exploited":false,"fixed_versions":["6.28.1","7.9.2","8.0.0-M8.1"],"ghsa_id":"GHSA-pwpc-hqq2-hx2x","id":"tcs_01M5N986QHTCKTPD1KK7YQBZD2","modified_at":"2023-11-08T03:58:58.731157Z","published_at":"2022-05-14T00:58:28Z","references":["https://osv.dev/vulnerability/GHSA-pwpc-hqq2-hx2x","https://nvd.nist.gov/vuln/detail/CVE-2017-15719","https://github.com/sebfz1/wicket-jquery-ui/wiki#cve-2017-15719---xss-in-wysiwyg-editor","http://openmeetings.apache.org/security.html#_toc_cve-2017-15719_-_wicket_jquery_ui_xss_in_wysiwyg_e"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-pwpc-hqq2-hx2x","url":"https://osv.dev/vulnerability/GHSA-pwpc-hqq2-hx2x"}],"summary":"Cross-site Scripting in wicket-jquery-ui"}