org.apache.wicket:wicket-extensions vulnerabilities

CVEs whose affected-version data names the org.apache.wicket:wicket-extensions package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-83539High· 7.4

5d ago

Apache Wicket: XSS in SmartLinkLabel and SmartLinkMultiLineLabel via a javascript: URL in the model data

Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.basic.SmartLinkLabel and org.apache.wicket.extensions.markup.html.basic.SmartLinkMultiLineLabel display a text value …

▾ TwilightApache Software Foundation · org.apache.wicket:wicket-extensionsEPSS 0.30%via CVEORG