Description
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Remediation
References
https://www.exploit-db.com/exploits/49437
Related Vulnerabilities
CVE-2023-27602 Vulnerability in maven package org.apache.linkis:linkis-dist
CVE-2020-26939 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk15on
CVE-2020-28196 Vulnerability in npm package krb5
CVE-2020-14340 Vulnerability in maven package org.jboss.xnio:xnio-nio
CVE-2013-3300 Vulnerability in maven package net.liftweb:lift-json_2.9.1