CVE-2022-29251

XWiki Platform Flamingo Theme UI is a tool that allows customization and preview of any Flamingo-based skin. Starting with versions 6.2.4 and 6.3-rc-1, a possible cross-site scripting vector is present in the "FlamingoThemesCode.WebHomeSheet" wiki page related to the "newThemeName" form field. Th...

PT-2022-19499

Name of the Vulnerable Software and Affected Versions XWiki Platform Flamingo Theme UI versions prior to 12.10.11 XWiki Platform Flamingo Theme UI versions prior to 13.4.7 XWiki Platform Flamingo Theme UI versions prior to 13.10.3 XWiki Platform Flamingo Theme UI version 14.0-rc-1 and earlier...

CVE-2022-29251: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

XWiki Platform Flamingo Theme UI is a tool that allows customization and preview of any Flamingo-based skin. Starting with versions 6.2.4 and 6.3-rc-1, a possible cross-site scripting vector is present in the FlamingoThemesCode.WebHomeSheet wiki page related to the "newThemeName" form field. The...