Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/12 3:54 p.m.7 views

GHSA-74RH-C5RH-88VG XWiki vulnerable to click-jacking through CSS injection in comments

Impact It's possible using comments to inject CSS that would transform the full wiki in a link area leading to a malicious page. All versions of XWiki are impacted by this kind of attack. Patches The problem has been patched not by preventing injecting CSS in comments, which is currently a featur...

5.3CVSS5.7AI score0.00279EPSS
SaveExploits0References9
Rows per page
Query Builder