CVE-2026-76985 | Apache Wicket Palette getAdditionalAttributes cross site scripting

A vulnerability, which was classified as problematic, has been found in Apache Wicket. This affects the function getAdditionalAttributes of the component Palette. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-76985. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More