What’s Vulnerable › Products

xwiki Commons vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your xwiki Commons version is affected

Latest xwiki Commons vulnerabilities

• CVE-2023-36471 — HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml (CVSS 5.4)
• CVE-2023-29528 — Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml (CVSS 9.0)
• CVE-2023-26055 — XWiki Commons may allow privilege escalation to programming rights via user's first name (CVSS 9.9)
• CVE-2022-24898 — Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml (CVSS 4.9)