The Apache Software Foundation has released a security advisory to address a vulnerabilities (CVE-2021-44140, CVE-2021-40369) affecting multiple versions of Apache JPSWiki. These vulnerabilities allow an attacker to execute javascript in the victim's browser and obtain some sensitive information about the victim. The Apache Software Foundation recommends upgrading Apache JSPWiki to version 2.11.0 or later.

Source: apache.org