Unrestricted file upload vulnerability in JSPWiki 2.4.104 and 2.5.139 allows remote attackers to upload and execute arbitrary .jsp files via an unspecified manipulation that attaches a .jsp file to an "entry page."
https://www.exploit-db.com/exploits/5112
https://exchange.xforce.ibmcloud.com/vulnerabilities/40511
http://www.bugsec.com/articles.php?Security=48&Web-Application-Firewall=0