XWiki < 14.10.5 - Cross-Site Scripting Detection

XWiki Platform is vulnerable to reflected XSS via the previewactions template. An attacker can inject JavaScript through the xcontinue parameter. !/usr/bin/env python3 -- coding: utf-8 -- """XWiki Platform is vulnerable to reflected XSS via the previewactions template.""" from kittysploit import...

CVE-2023-35162 XPlatform Wiki vulnerable to cross-site scripting via xcontinue parameter in preview actions template

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page XSS. It's possible to exploit the previewactions template to perform a XSS, e.g. by using URL such as:...

XWiki Platform Cross-site Scripting Vulnerabilities

XWiki Platform is a suite of Wiki platforms for creating web collaboration applications from the XWiki Foundation in France. A cross-site scripting vulnerability exists in XWiki Platform versions 6.1-rc-1 and earlier. An attacker can exploit this vulnerability to inject Javascript code into a pag...