[CVE-2019-0224] Apache JSPWiki Cross-site scripting vulnerability

[Juan Pablo Santos Rodríguez <juanpablo.santos () gmail com>]

[CVEID]:CVE-2019-0224
[PRODUCT]:Apache JSPWiki
[VERSION]:Apache JSPWiki 2.9.0 to 2.11.0.M2
[PROBLEMTYPE]:Cross-site scripting vulnerability
[REFERENCES]:https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-0224
[DESCRIPTION]: A carefully crafted URL could execute javascript on another
user's session. No information could be saved on the server or jspwiki
database, nor would an attacker be able to execute js on someone else's
browser; only on it's own browser.