~ / search / GHSA-43hg-g44q-474q

GHSA-43hg-g44q-474q

Cross Site Scripting (XSS) in XWiki

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-3137

Packages

EcosystemPackageAffectedFixed in
Maven org.xwiki.commons:xwiki-commons < 12.10.3 12.10.3

Details

As written in the advisory (Markdown source, shown as plain text).

XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.

References

External links from the advisory. They lead to third-party sites.