Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-skin-ui

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 10.0
    CVE-2023-37462 Scanner template EPSS 92%

    Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-skin-ui

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `SkinsCode.XWikiSkinsSheet` leads to an injection vector from view right on that document to programming rights, or in o…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-skin-ui Maven