| XWiki allows Reflected XSS in two templatesCVE-2025-32430 · GHSA-M9X4-W7P9-MXHX |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
متوسط
|
اصلاح گزارش شده |
|
| XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit templateCVE-2023-35160 · GHSA-R8XC-XXH3-Q5X3 |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabledCVE-2023-45136 · GHSA-QCJ9-GCPG-4W2W |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace templateCVE-2023-35159 · GHSA-X234-MG7Q-M8G8 |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm CVE-2023-29203 · GHSA-VVP7-R422-RX83 |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
کم
|
اصلاح گزارش شده |
|
| Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable MacroCVE-2023-29207 · GHSA-6VGH-9R3C-2CXP |
org.xwiki.platform:xwiki-platform-flamingo-skin-resourcesorg.xwiki.platform:xwiki-platform-flamingo-skin |
Maven |
زیاد
|
اصلاح گزارش شده |
|
| XWiki has Reflected Cross-Site Scripting (XSS) in page history compareCVE-2026-40105 · GHSA-W4FJ-87J5-F25C |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
متوسط
|
اصلاح گزارش شده |
|
| XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized ActorCVE-2022-36091 · GHSA-599V-W48H-RJRM |
org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web |
Maven |
زیاد
|
اصلاح گزارش شده |
|
| XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error MessagesCVE-2026-24128 · GHSA-WVQX-M5PX-6CMP |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
متوسط
|
اصلاح گزارش شده |
|
| XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplicationCVE-2025-66472 · GHSA-7VPR-JM38-WR7W |
org.xwiki.platform:xwiki-platform-flamingo-skin-resourcesorg.xwiki.platform:xwiki-platform-web-templates |
Maven |
متوسط
|
اصلاح گزارش شده |
|
| In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit themCVE-2024-43401 · GHSA-F963-4CQ8-2GW7 |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolutionCVE-2024-41947 · GHSA-692V-783F-MG8X |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki Platform vulnerable to XSS with edit right in the create document form for existing pagesCVE-2023-45137 · GHSA-93GH-JGJJ-R929 |
org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki users can be tricked to execute scripts as the create page action doesn't display the page's titleCVE-2023-45135 · GHSA-GHF6-2F42-MJH9 |
org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki Platform XSS vulnerability from account in the create page form via template providerCVE-2023-45134 · GHSA-GR82-8FJ2-GGC3 |
org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayerCVE-2023-40176 · GHSA-H8CM-3V5F-RGP6 |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
متوسط
|
اصلاح گزارش شده |
|
| XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent templateCVE-2023-34464 · GHSA-FP7H-F9F5-X4Q7 |
org.xwiki.platform:xwiki-platform-web-templatesorg.xwiki.platform:xwiki-platform-web |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macroCVE-2023-29513 · GHSA-FP36-MJW5-FMGX |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
متوسط
|
اصلاح گزارش شده |
|
| xwiki-platform-web-templates vulnerable to Eval InjectionCVE-2023-29512 · GHSA-HG5X-3W3X-7G96 |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
بحرانی
|
اصلاح گزارش شده |
|
| XWiki Cross-Site Request Forgery (CSRF) for actions on tagsCVE-2022-36095 · GHSA-FXWR-4VQ9-9VHJ |
org.xwiki.platform:xwiki-platform-web-templates |
Maven |
متوسط
|
اصلاح گزارش شده |
|
