GHSA-74RH-C5RH-88VG XWiki vulnerable to click-jacking through CSS injection in comments
Impact It's possible using comments to inject CSS that would transform the full wiki in a link area leading to a malicious page. All versions of XWiki are impacted by this kind of attack. Patches The problem has been patched not by preventing injecting CSS in comments, which is currently a featur...