Cross-Site Scripting (XSS)

org.xwiki.commons:xwiki-commons-xml is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape arbitrary HTML code before it output to the front end, allowing an attacker to inject and execute malicious javascript on the victim's browser...

org.xwiki.commons:xwiki-commons-diff-script (>=11.6-rc-1, <=14.9), org.xwiki.commons:xwiki-commons-diff-xml (>=11.6-rc-1, <=14.9) +57 more potentially affected by CVE-2023-29528 via org.xwiki.commons:xwiki-commons-xml (>=4.2-milestone-1, <=14.9)

org.xwiki.commons:xwiki-commons-xml MAVEN version =4.2-milestone-1, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =14.8-rc-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =14.8-rc-1,...

org.xwiki.commons:xwiki-commons-diff-script (>=11.6-rc-1, <=14.5), org.xwiki.commons:xwiki-commons-diff-xml (>=11.6-rc-1, <=14.5) +54 more potentially affected by CVE-2023-29201 via org.xwiki.commons:xwiki-commons-xml (>=4.2-milestone-1, <=14.5)

org.xwiki.commons:xwiki-commons-xml MAVEN version =4.2-milestone-1, =11.6-rc-1, =11.6-rc-1, =6.2-milestone-1, =5.2-milestone-1, =10.7-rc-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-1, =4.2-milestone-3, =4.2-milestone-1, =4.2-milestone-1,...