Filter
AND
AND
Xwiki XwikiXWiki Platform XSS with edit right in the create document form for existing pages
First published (updated )
Xwiki XwikiCode injection from view right on XWiki.AttachmentSelector in xwiki-platform
9.9
First published (updated )
Xwiki XwikiCode injection in template provider administration in xwiki-platform
10
First published (updated )
Xwiki XwikiCode injection in xwiki-platform-web-templates
9.9
First published (updated )
Xwiki XwikiCode injection in org.xwiki.platform:xwiki-platform-attachment-ui
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiCode injection from view right using Invitation.InvitationCommon in xwiki-platform
9.9
First published (updated )
Xwiki XwikiCode injection in display method used in user profiles in xwiki-platform
10
First published (updated )
Xwiki XwikiAsync and display macro allow displaying and interacting with any document in restricted mode
10
First published (updated )
Xwiki Xwikixwiki-platform-administration-ui vulnerable to privilege escalation
9.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki Xwikiorg.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
9.9
First published (updated )
Xwiki XwikiImproper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-panels-ui
10
First published (updated )
Xwiki XwikiXWiki Platform users may execute anything with superadmin right through comments and async macro
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiXWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile
10
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
10
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to Remote Code Execution in Annotations
10
First published (updated )
Xwiki Xwikiorg.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
10
First published (updated )
Xwiki XwikiMissing Authorization in XWiki Platform
9.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiXWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection
9.9
First published (updated )
Xwiki XwikiXWiki Platform Mentions UI vulnerable to Cross-site Scripting
First published (updated )
Xwiki XwikiXWiki Platform Wiki UI Main Wiki Eval Injection vulnerability
9.9
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list
First published (updated )
Xwiki XwikiXWiki Platform Web Parent POM vulnerable to XSS in the attachment history
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiCrypto script service uses hashing algorithm SHA1 with RSA for certificate signature in xwiki-platform
9.8
First published (updated )