Package · Maven

org.xwiki.platform:xwiki-platform-icon-script

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 10.0

CVE-2023-36470

Code injection in icon themes of XWiki Platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with pro…

xwiki xwiki-platform org.xwiki.platform:xwiki-platform-icon-ui org.xwiki.platform:xwiki-platform-icon-default Maven

Jun 29, 2023