Apache Wicket 1.4.x XSS Vulnerability via wicket:pageMapName Parameter

CVE-2012-0047

Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the wicket:pageMapName parameter.

Learn more about our Cis Benchmark Audit For Apache Http Server.