Filter
AND
AND
AND

Xwiki XwikiImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-skin-ui

First published (updated )

Xwiki RenderingImproper Neutralization of Script in Attributes in XWiki (X)HTML renderers

First published (updated )

Xwiki XwikiCode injection from view right on XWiki.AttachmentSelector in xwiki-platform

First published (updated )

Xwiki XwikiCode injection in template provider administration in xwiki-platform

First published (updated )

Xwiki XwikiCode injection in xwiki-platform-web-templates

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Xwiki XwikiCode injection from view right on XWiki.ClassSheet in xwiki-platform

First published (updated )

Xwiki XwikiCode injection in org.xwiki.platform:xwiki-platform-attachment-ui

First published (updated )

Xwiki XwikiCode injection from view right using Invitation.InvitationCommon in xwiki-platform

First published (updated )

Xwiki XwikiCode injection in display method used in user profiles in xwiki-platform

First published (updated )

maven/org.xwiki.platform:xwiki-platform-distribution-warPrivilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Xwiki XwikiAsync and display macro allow displaying and interacting with any document in restricted mode

First published (updated )

Xwiki Xwikixwiki-platform-administration-ui vulnerable to privilege escalation

First published (updated )

Xwiki XwikiXSS

First published (updated )

Xwiki XwikiXSS

First published (updated )

Xwiki XwikiXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Xwiki Xwikiorg.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation

First published (updated )

Xwiki XwikiCSRF

First published (updated )

Xwiki XwikiImproper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-panels-ui

First published (updated )

Xwiki XwikiXWiki Platform users may execute anything with superadmin right through comments and async macro

First published (updated )

Xwiki XwikiXWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Xwiki XwikiXWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author

First published (updated )

Xwiki XwikiXWiki Platform vulnerable to Remote Code Execution in Annotations

First published (updated )

Xwiki Xwikiorg.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

First published (updated )

Xwiki XwikiMissing Authorization in XWiki Platform

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203