CVE-2026-76986 | Apache Wicket AbstractSingleSelectChoice getNullValidDisplayValue cross site scripting

A vulnerability classified as problematic was found in Apache Wicket. The impacted element is the function getNullValidDisplayValue of the component AbstractSingleSelectChoice. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-76986. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More