org.xwiki.commons:xwiki-commons-legacy-velocity (>=10.7-rc-1, <=12.6.6), org.xwiki.rendering:xwiki-rendering-syntax-xwiki10 (>=3.2-milestone-3, <=7.4.6) +1 more potentially affected by CVE-2022-24897 via org.xwiki.commons:xwiki-commons-velocity (>=3.2-milestone-3, <=12.6.6)

org.xwiki.commons:xwiki-commons-velocity MAVEN version =3.2-milestone-3, =10.7-rc-1, =3.2-milestone-3, =4.3-milestone-2, =12.6.6 Source cves: CVE-2022-24897 Source advisory: GHSA-CVX5-M8VG-VXGC...

CVE-2021-24897 Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site Scripting

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2021-24897

The CVE-2021-24897 entry concerns the WordPress Add Subtitle plugin (

CVE-2020-24897

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

CVE-2020-24897

The Table Filter and Charts for Confluence Server app before 5.3.25 for Atlassian Confluence allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting XSS through the provided Markdown markup to the "Table from CSV" macro...

CVE-2020-24897

The CVE-2020-24897 issue affects the Table Filter and Charts for Confluence Server app (Atlassian Confluence) prior to version 5.3.25. A vulnerability in the Table from CSV macro allows remote attackers to inject arbitrary HTML or JavaScript via cross-site scripting (XSS) through the Markdown mar...