Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-web-war

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2024-37900 EPSS 16%

    XWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading an attachment with a malicious filename, malicious JavaScript code could be executed. This requires a social engineering attack to get the …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-war Maven