All products

org.xwiki.commons:xwiki-commons-xml

Maven · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restrictedCVE-2023-36471 · GHSA-6PQF-C99P-758V org.xwiki.commons:xwiki-commons-xml Maven Critical Fix reported
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xmlCVE-2023-29528 · GHSA-X37V-36WV-6V6H org.xwiki.commons:xwiki-commons-xml Maven Critical Fix reported
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerabilityCVE-2023-29201 · GHSA-M3JR-CVHJ-F35J org.xwiki.commons:xwiki-commons-xml Maven Critical Fix reported
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xmlCVE-2023-31126 · GHSA-PV7V-PH6G-3GXV org.xwiki.commons:xwiki-commons-xml Maven Critical Fix reported
XWiki Platform may allow privilege escalation to programming rights via user's first nameCVE-2023-26055 · GHSA-8CW6-4R32-6R3H org.xwiki.commons:xwiki-commons-xml Maven Critical Fix reported
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xmlCVE-2022-24898 · GHSA-M2R5-4W96-QXG5 org.xwiki.commons:xwiki-commons-xml Maven Medium Fix reported