2 results · Feed
-
High 8.0
XWiki has no right protection on rollback action
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protection, a user can rollback to a previous version of the page to gain rights they don't have anymore. The probl…
-
Medium 5.4
XWiki XSS Vulnerability
The Image Import function in XWiki through 10.7 has XSS.