writeups.xyz / CVE-2022-24948: Apache JSPWiki preauth Stored XSS to ATO

Submitter : c2a

Date: 2 March 2022

Bounty : undisclosed

Vulnerabilities :

• Stored XSS
• Account Takeover

Programs :

• Apache

Authors :

• Paulos Yibelo (@PaulosYibelo)

Link :
https://octagon.net/blog/2022/03/02/apache-jspwiki-preauth-xss-to-ato/