Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-13407
HistoryFeb 13, 2022 - 12:00 a.m.

XWiki Platform Cross-Site Scripting Vulnerability (CNVD-2022-13407)

2022-02-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
xwiki
cross-site scripting
vulnerability
data validation
filtering
user-supplied data
output
registerinline
attacker
client-side javascript code

EPSS

0.001

Percentile

36.8%

Xwiki Platform is a wiki platform for creating web collaboration applications from the French company Xwiki. XWiki Platform is vulnerable to a cross-site scripting vulnerability that stems from a lack of data validation filtering of user-supplied data and output in registerinline, which could be exploited by an attacker to execute client-side JavaScript code.

EPSS

0.001

Percentile

36.8%