Description
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Remediation
References
https://www.exploit-db.com/exploits/49437
Related Vulnerabilities
CVE-2022-2932 Vulnerability in npm package mobiledoc-kit
CVE-2018-20677 Vulnerability in maven package org.webjars.npm:bootstrap
CVE-2020-8147 Vulnerability in npm package utils-extend
CVE-2013-7250 Vulnerability in maven package org.projectforge:projectforge-webapp
CVE-2020-21485 Vulnerability in maven package org.alluxio:alluxio-parent