Security
فارسی
All products

org.xwiki.platform:xwiki-platform-web

Maven · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vmCVE-2023-26473 · GHSA-VPX4-7RFP-H545 org.xwiki.platform:xwiki-platform-web Maven Medium Fix reported
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable MacroCVE-2023-29207 · GHSA-6VGH-9R3C-2CXP org.xwiki.platform:xwiki-platform-flamingo-skin-resourcesorg.xwiki.platform:xwiki-platform-flamingo-skin Maven High Fix reported
XSS Cross Site ScriptingCVE-2021-29459 · GHSA-5C66-V29H-XJH8 org.xwiki.platform:xwiki-platform-oldcoreorg.xwiki.platform:xwiki-platform-web Maven Critical Fix reported
The reset password form reveal users email addressCVE-2021-32731 · GHSA-H4M4-PGP4-WHGM org.xwiki.platform:xwiki-platform-web Maven Medium Fix reported
XWiki vulnerable to click-jacking through CSS injection in commentsCVE-2026-26000 · GHSA-74RH-C5RH-88VG org.xwiki.platform:xwiki-platform-web Maven Medium Fix reported
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized ActorCVE-2022-36091 · GHSA-599V-W48H-RJRM org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web Maven High Fix reported
Improper escaping in XWiki PlatformCVE-2020-13654 · GHSA-P93C-H8QM-7256 org.xwiki.platform:xwiki-platform-web Maven High Fix reported
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pagesCVE-2023-45137 · GHSA-93GH-JGJJ-R929 org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web Maven Critical Fix reported
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's titleCVE-2023-45135 · GHSA-GHF6-2F42-MJH9 org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web Maven Critical Fix reported
XWiki Platform XSS vulnerability from account in the create page form via template providerCVE-2023-45134 · GHSA-GR82-8FJ2-GGC3 org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web Maven Critical Fix reported
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent templateCVE-2023-34464 · GHSA-FP7H-F9F5-X4Q7 org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web Maven Critical Fix reported
XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution WizardCVE-2022-36093 · GHSA-H5J3-5X63-P8JV org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web Maven High Fix reported
XWiki Platform Web Parent POM vulnerable to XSS in the attachment historyCVE-2022-36094 · GHSA-MXF2-4R22-5HQ9 org.xwiki.platform:xwiki-platform-web Maven High Fix reported
Unauthenticated user can list hidden document from multiple velocity templates in XWikiCVE-2022-24820 · GHSA-QPP2-2MCP-2WM5 org.xwiki.platform:xwiki-platform-web Maven Medium Fix reported
Information exposure in xwiki-platformCVE-2022-23619 · GHSA-35FG-HJCR-J65F org.xwiki.platform:xwiki-platform-web Maven Medium Fix reported