Cross-site Scripting
In Apache wicket-jquery-ui JS code created in WYSIWYG editor will be executed on display.
In Apache wicket-jquery-ui JS code created in WYSIWYG editor will be executed on display.
A security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor.