PT-2026-32445 · Bitnami · Wiremock
Published
2026-04-13
·
Updated
2026-04-13
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature. An attacker can host a malicious payload and perform a test mapping pointing to the attacker's file, and the result will render on the Matched page in the Body area, resulting in the execution of the payload. This occurs because the response body is not validated or sanitized.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Wiremock