A vulnerability classified as critical has been found in Apache Wicket up to 8.15.0/9.17.0/10.0.0. Affected is an unknown function of the file XSLTResourceStream.java. The manipulation leads to injection.
This vulnerability is traded as CVE-2024-36522. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
