Description
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.xwiki.commons:xwiki-commons | < 12.10.3 | 12.10.3 | GHSA-43hg-g44q-474q |
Medium
CVE-2021-3137
EUVD-2021-0485GHSA-43hg-g44q-474q
Cross Site Scripting (XSS) in XWiki
Published Jan 20, 2021 · Updated Aug 3, 2024 · Assigned by mitre