Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-attachment-ui

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.9
    CVE-2022-36097 EPSS 58%

    XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form

    XWiki Platform Attachment UI provides a macro to easily upload and select attachments for XWiki Platform, a generic wiki platform. Starting with version 14.0-rc-1 and prior to 14.4-rc-1, it's possible to store JavaScript in an attachment name, which will be e…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-attachment-ui Maven