Unrated severityNVD Advisory· Published Aug 29, 2011· Updated Apr 29, 2026
CVE-2011-2712
CVE-2011-2712
Description
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
Affected products
18cpe:2.3:a:apache:wicket:1.4.0:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:apache:wicket:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.12:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.13:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.14:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.15:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.16:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.17:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:apache:wicket:1.4.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- secunia.com/advisories/45727nvdVendor Advisory
- wicket.apache.org/2011/08/23/cve-2011-2712.htmlnvdVendor Advisory
- securityreason.com/securityalert/8357nvd
- www.securityfocus.com/archive/1/519398/100/0/threadednvd
- www.securityfocus.com/bid/49290nvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/69394nvd
News mentions
0No linked articles in our index yet.