VendorsXWikicommonsall versions
Vulnerabilities

XWiki Commons

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-26055
XWiki Commons may allow privilege escalation to programming rights via user's first name
Published 2023-03-02 · Modified
9.9EPSS 0.012
CVE-2023-29528
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
Published 2023-04-20 · Modified
9.0EPSS 0.013
CVE-2023-36471
HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml
Published 2023-06-29 · Modified
9.0EPSS 0.010
CVE-2022-24898
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Published 2022-04-28 · Modified
4.9EPSS 0.015