Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-realtime-ui

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.7
    CVE-2024-31988

    XWiki Platform CSRF remote code execution through the realtime HTML Converter API

    XWiki Platform is a generic wiki platform. Starting in version 13.9-rc-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, when the realtime editor is installed in XWiki, it allows arbitrary remote code execution with the interaction of an admin user wit…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-realtime-ui Maven