Filter
AND
AND
Xwiki XwikiXWiki Platform's Groovy jobs check the wrong author, allowing remote code execution
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
9.1
First published (updated )
Xwiki XwikiXWiki Platform privilege escalation (PR) from account through AWM content fields
9.9
First published (updated )
Xwiki XwikiSXSS in the user profile via the timezone displayer
9.1
First published (updated )
Xwiki XwikiPersistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiUpgrading doesn't prevent exploiting vulnerable XWiki documents
10
First published (updated )
Xwiki XwikiCode injection through NotificationRSSService in XWiki Platform
10
First published (updated )
Xwiki XwikiCode injection in icon themes of XWiki Platform
10
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters
9.1
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiXWiki Platform may show email addresses in clear in REST results
7.5
First published (updated )
Xwiki XwikiURL Redirection to Untrusted Site in XWiki
6.1
First published (updated )