CVE WATCH / VULNERABILITY DETAIL
CVE-2026-84231
UNKNOWNCVSS 0NVD feed
Published 1 November 2026 · tracked since 1 November 2026
Description
Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.link.ExternalLink builds a JavaScript click handler and writes it into the tag's onclick attribute whenever the markup tag the component is bound to is not an a, link or area element. The URL
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog