~ / search / GHSA-6mvr-cq72-f66v

GHSA-6mvr-cq72-f66v

XWiki XSS Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-16277

Packages

EcosystemPackageAffectedFixed in
Maven org.xwiki.platform:xwiki-platform <= 10.7 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

The Image Import function in XWiki through 10.7 has XSS.

References

External links from the advisory. They lead to third-party sites.