org.xwiki.contrib.changerequest:application-changerequest-ui
1 known vulnerabilities.
1 result · Feed
-
Critical 10.0CVE-2023-45138 EPSS 72%
Change Request Application vulnerable to XSS and remote code execution through change request title
Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Starting in version 0.11 and prior to version 1.9.2, it's possible for a user without any specific right to perform script injection and remot…