org.xwiki.platform:xwiki-web-standard

2 results · Feed

• Critical 9.1
  CVE-2023-45134

  XWiki Platform XSS vulnerability from account in the create page form via template provider

  XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` starting in version 3.1-milestone-1 and prior to 13.4-rc-1, `org.xwiki.platform:xwiki-platform-web-templates` prio…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates org.xwiki.platform:xwiki-platform-web Maven
  Oct 25, 2023
• High 8.9
  CVE-2023-29207

  Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro

  XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing column names, thus allowing the insertion of raw HTML code including JavaScript. This vulnerability was also exploitable via…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates org.xwiki.platform:xwiki-platform-web Maven
  Apr 15, 2023