PT-2021-14462

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 12.9RC1 Description The XWiki Platform, specifically with the Ratings API installed, exposes an API that allows performing SQL requests without properly escaping the from and where search arguments. This could...