4276 matches found
WS-2019-0615
In xwiki-platform, versions xwiki-platform-3.0.1 to xwiki-platform-11.3.2 are vulnerable against privilege escalation when a user manages to set a higher privilege ‘script’ to himself...
XWiki cross-site scripting vulnerability (CNVD-2018-20220)
XWiki is an open source wiki and application platform written in Java and released under the LGPL. A cross-site scripting vulnerability exists in the 'image:' function in XWiki 10.7 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary payloads or scripts from...
CVE-2018-16277
The Image Import function in XWiki through 10.7 has XSS...
CVE-2018-16277
The Image Import function in XWiki through 10.7 has XSS...
Cross site scripting
The Image Import function in XWiki through 10.7 has XSS...
PT-2018-13458
Name of the Vulnerable Software and Affected Versions XWiki versions prior to 10.8 Description The issue is related to the Image Import function, which has a cross-site scripting XSS problem. Recommendations For versions prior to 10.8, update to version 10.8 or later to resolve the issue...
CVE-2018-16277
The CVE-2018-16277 entry concerns XSS in the Image Import function of XWiki versions up to and including 10.7 . The vulnerability is described as a cross-site scripting flaw in the image: function, with the CMV notes indicating XSS could be triggered via this component. The available connected so...
CVE-2018-16277
The Image Import function in XWiki through 10.7 has XSS...
CVE-2018-16277: Improper Neutralization of Input During Web Page Generation
The Image Import function in XWiki through 10.7 has XSS...
XWiki labs CryptPad pad export cross-site scripting vulnerability
XWiki labs CryptPad is an editor from XWiki labs. pad export is one of the modules for exporting files in pad format. A cross-site scripting vulnerability exists in pad export in XWiki labs CryptPad versions prior to 1.1.1. A remote attacker can exploit this vulnerability to inject arbitrary web...
CVE-2017-1000051
Cross-site scripting XSS vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content...
CVE-2017-1000051
Cross-site scripting XSS vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content...
Cross site scripting
Cross-site scripting XSS vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content...
CVE-2017-1000051: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content...
CVE-2017-1000051
CVE-2017-1000051 is a cross-site scripting (XSS) vulnerability in CryptPad’s pad export feature for XWiki Labs CryptPad versions before 1.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via the pad content. Public descriptions confirm the affected component is the pa...
CVE-2017-1000051
Cross-site scripting XSS vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the pad content...
PT-2017-10761
Name of the Vulnerable Software and Affected Versions XWiki labs CryptPad versions prior to 1.1.1 Description A cross-site scripting XSS issue exists in the pad export feature of XWiki labs CryptPad, allowing remote attackers to inject arbitrary web script or HTML via the pad content...
XWiki 4.2-milestone-2 Multiple Stored XSS Vulnerabilities
No description provided by source. Exploit Title: Multiple Stored XSS Vulnerabilities in XWiki. Date: 26/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.xwiki.org Software Link: http://enterprise.xwiki.org/xwiki/bin/view/Main/Download Version: 4.2-milestone-2 Gr33Tz:...