Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filtersXWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication
XWiki allows Reflected XSS in two templates
In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them
XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
XWiki Platform XSS vulnerability from account in the create page form via template provider
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
xwiki-platform-web-templates vulnerable to Eval Injection
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm
XWiki Cross-Site Request Forgery (CSRF) for actions on tags
XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor
XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard
Unauthenticated user can retrieve the list of users through uorgsuggest.vm
Cross site scripting in registration template in xwiki-platform
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.