Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 34
Reset filtersXWiki has Reflected Cross-Site Scripting (XSS) in page history compare
XWiki vulnerable to click-jacking through CSS injection in comments
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication
XWiki configuration files can be accessed through the webjars API
XWiki allows Reflected XSS in two templates
In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them
XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution
XWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
XWiki Platform XSS vulnerability from account in the create page form via template provider
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
xwiki-platform-web-templates vulnerable to Eval Injection
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm
XWiki Cross-Site Request Forgery (CSRF) for actions on tags
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.