What is CVE-2026-48910?

CVE-2026-48910 is a medium-severity vulnerability in Apache Software Foundation Jspwiki, classified under Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS). CVSS score: 6.5/10. Published 2026-07-30.

How severe is CVE-2026-48910?

Medium severity. CVSS v3 base score is 6.5 out of 10.

XSS in Apache Software Foundation Jspwiki

CVE-2026-48910

A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, which could allow the attacker to execute javascript in the victim's browser and get some sensitive i…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Apache Software Foundation Jspwiki — versions 0

Weakness classification (CWE)

CWE-80 — Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

References

security@apache.org (vendor-advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2026-48910?: CVE-2026-48910 is a medium-severity vulnerability in Apache Software Foundation Jspwiki, classified under Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS). CVSS score: 6.5/10. Published 2026-07-30.
How severe is CVE-2026-48910?: Medium severity. CVSS v3 base score is 6.5 out of 10.