Skip to content

org.xwiki.platform:xwiki-platform-web vulnerabilities (Maven)

15 vulnerabilities.

org.xwiki.platform:xwiki-platform-web MavenXWiki Platform affected by click-jacking through CSS injection in commentsCVE-2026-26000Fix available5.3 MediumFebruary 12, 2026
org.xwiki.platform:xwiki-platform-web MavenXWiki Platform XSS with edit right in the create document form for existing pagesCVE-2023-45137Fix available9.1 CriticalOctober 25, 2023
org.xwiki.platform:xwiki-platform-web MavenXWiki users can be tricked to execute scripts as the create page action doesn't display the page's titleCVE-2023-45135Fix available9.1 CriticalOctober 25, 2023
org.xwiki.platform:xwiki-platform-web MavenXWiki Platform XSS vulnerability from account in the create page form via template providerCVE-2023-45134Fix available9.1 CriticalOctober 25, 2023
org.xwiki.platform:xwiki-platform-web MavenXWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent templateCVE-2023-34464Fix available9.1 CriticalJune 20, 2023
org.xwiki.platform:xwiki-platform-web MavenImproper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable MacroCVE-2023-29207Fix available8.9 HighApril 12, 2023
org.xwiki.platform:xwiki-platform-web MavenXWiki Platform allows unprivileged users to make arbitrary select queries using DatabaseListProperty and suggest.vmCVE-2023-26473Fix available6.5 MediumMarch 2, 2023
org.xwiki.platform:xwiki-platform-web MavenXWiki Platform Web Parent POM vulnerable to XSS in the attachment historyCVE-2022-36094Fix availableEPSS 64.8%8.9 HighSeptember 8, 2022
org.xwiki.platform:xwiki-platform-web MavenXWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution WizardCVE-2022-36093Fix available8.5 HighSeptember 8, 2022
org.xwiki.platform:xwiki-platform-web MavenXWiki Platform Web Templates vulnerable to Missing Authorization and Exposure of Private Personal Information to an Unauthorized ActorCVE-2022-36091Fix available7.5 HighSeptember 8, 2022
org.xwiki.platform:xwiki-platform-web MavenUnauthenticated user can list hidden document from multiple velocity templatesCVE-2022-24820Fix available5.3 MediumApril 8, 2022
org.xwiki.platform:xwiki-platform-web MavenInformation exposure in xwiki-platformCVE-2022-23619Fix available5.3 MediumFebruary 9, 2022
org.xwiki.platform:xwiki-platform-web MavenThe reset password form reveal users email addressCVE-2021-32731Fix available5.3 MediumJuly 1, 2021
org.xwiki.platform:xwiki-platform-web MavenXSS Cross Site ScriptingCVE-2021-29459Fix available9.6 CriticalApril 20, 2021
org.xwiki.platform:xwiki-platform-web MavenImproper escaping in XWiki PlatformCVE-2020-13654Public exploitFix available7.5 HighDecember 31, 2020