CVE-2015-5347

Cross-site scripting (XSS) vulnerability in the getWindowOpenJavaScript function in org.apache.wicket.extensions.ajax.markup.html.modal.ModalWindow in Apache Wicket 1.5.x before 1.5.15, 6.x before 6.22.0, and 7.x before 7.2.0 might allow remote attackers to inject arbitrary web script or HTML via a ModalWindow title.

• CWE-79

• http://wicket.apache.org/news/2016/03/01/cve-2015-5347.htmlVendor Advisory
• http://www.securitytracker.com/id/1035165Third Party Advisory, VDB Entry
• https://issues.apache.org/jira/browse/WICKET-6037Exploit, Vendor Advisory
• http://wicket.apache.org/news/2016/03/01/cve-2015-5347.htmlVendor Advisory
• http://www.securitytracker.com/id/1035165Third Party Advisory, VDB Entry
• https://issues.apache.org/jira/browse/WICKET-6037Exploit, Vendor Advisory

Published

Apr 12, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5341mod_scorm in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8…
• CVE-2015-5342The choice module in Moodle through 2.6.11, 2.7.x before 2.7…
• CVE-2015-5343Integer overflow in util.c in mod_dav_svn in Apache Subversi…
• CVE-2015-5344The camel-xstream component in Apache Camel before 2.15.5 an…
• CVE-2015-5345The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x…
• CVE-2015-5346Session fixation vulnerability in Apache Tomcat 7.x before 7…
• CVE-2015-5348Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and…
• CVE-2015-5349The CSV export in Apache LDAP Studio and Apache Directory St…
• CVE-2015-5350In Garden versions 0.22.0-0.329.0, a vulnerability has been …
• CVE-2015-5351The (1) Manager and (2) Host Manager applications in Apache …
• CVE-2015-5352The x11_open_helper function in channels.c in ssh in OpenSSH…
• CVE-2015-5353Directory traversal vulnerability in Novius OS 5.0.1 (Elche)…