PT-2012-3018

Name of the Vulnerable Software and Affected Versions XWiki Enterprise version 3.4 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the XWiki.XWikiComments comment parameter to "xwiki/bin/commentadd/Main/WebHome", the XWiki.XWikiUsers ...