CVE-2026-83559 | Apache Wicket up to 8.19.0/9.24.0/10.11.0 JavaScriptUtils JavaScriptUtils.java cross site scripting

November 2, 2026 Yanac

A vulnerability identified as problematic has been detected in Apache Wicket up to 8.19.0/9.24.0/10.11.0. Affected by this issue is the function org.apache.wicket.core.util.string.JavaScriptUtils.escapeQuotes of the file JavaScriptUtils.java of the component JavaScriptUtils. The manipulation leads to cross site scripting.

This vulnerability is listed as CVE-2026-83559. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More