maven

org.xwiki.platform:xwiki-platform-web-templates

23 Total advisories

23 Vulnerabilities

0 Malware

Dependency scanning

Check whether org.xwiki.platform:xwiki-platform-web-templates is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

org.xwiki.platform:xwiki-platform-web-templates

Vulnerabilities

XWiki has Reflected Cross-Site Scripting (XSS) in page history compare

XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor

XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages

XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication

XWiki allows Reflected XSS in two templates

In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them

XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution

XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages

XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled

XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title

XWiki Platform XSS vulnerability from account in the create page form via template provider

XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer

XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template

XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template

XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template

xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro

xwiki-platform-web-templates vulnerable to Eval Injection

Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro

Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm

XWiki Cross-Site Request Forgery (CSRF) for actions on tags

XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard

Unauthenticated user can retrieve the list of users through uorgsuggest.vm

Cross site scripting in registration template in xwiki-platform

Browse more Maven advisories

Start Securing