Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-livedata-macro

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.9
    CVE-2023-29508

    org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Cross-site Scripting

    XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can introduce a stored XSS by using the Live Data macro, if the last author of the content of the page has script rights. This has been patche…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-livedata-macro Maven
  • High 8.9
    CVE-2023-26480

    XWiki-Platform vulnerable to stored Cross-site Scripting via the HTML displayer in Live Data

    XWiki Platform is a generic wiki platform. Starting in version 12.10, a user without script rights can introduce a stored cross-site scripting by using the Live Data macro. This has been patched in XWiki 14.9, 14.4.7, and 13.10.10. There are no known workarou…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-livedata-macro Maven