org.xwiki.platform:xwiki-platform-web-templates vulnerabilities (Maven)
23 vulnerabilities.
org.xwiki.platform:xwiki-platform-web-templatesMavenXWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality6.5 Mediumorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages6.5 Mediumorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication6.5 Mediumorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform contains Reflected XSS vulnerability in two templates6.5 Mediumorg.xwiki.platform:xwiki-platform-web-templatesMavenIn XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them9.1 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform XSS through conflict resolution9.1 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform XSS with edit right in the create document form for existing pages9.1 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled9.7 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki users can be tricked to execute scripts as the create page action doesn't display the page's title9.1 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform XSS vulnerability from account in the create page form via template provider9.1 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenSXSS in the user profile via the timezone displayer9.1 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template9.7 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template9.7 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template9.1 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenUsers can be created even when registration is disabled without validation via the template macro in xwiki-platform5.0 Mediumorg.xwiki.platform:xwiki-platform-web-templatesMavenCode injection in xwiki-platform-web-templates9.9 Criticalorg.xwiki.platform:xwiki-platform-web-templatesMavenImproper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro8.9 Highorg.xwiki.platform:xwiki-platform-web-templatesMavenUnauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm3.7 Loworg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Cross-Site Request Forgery (CSRF) for actions on tags4.3 Mediumorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard8.5 Highorg.xwiki.platform:xwiki-platform-web-templatesMavenXWiki Platform Web Templates vulnerable to Missing Authorization and Exposure of Private Personal Information to an Unauthorized Actor7.5 Highorg.xwiki.platform:xwiki-platform-web-templatesMavenUnauthenticated user can retrieve the list of users through uorgsuggest.vm5.3 Mediumorg.xwiki.platform:xwiki-platform-web-templatesMavenCross site scripting in registration template in xwiki-platform7.4 High