org.xwiki.platform:xwiki-platform-tool-configuration-resources
1 known vulnerabilities.
1 result · Feed
-
Medium 5.4
XSS by SVG upload in xwiki-platform
XWiki is a generic wiki platform offering runtime services for applications built on top of it. When using default XWiki configuration, it's possible for an attacker to upload an SVG containing a script executed when executing the download action on the file.…