Description
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Remediation
References
https://www.exploit-db.com/exploits/49437
Related Vulnerabilities
CVE-2016-10735 Vulnerability in maven package ru.taskurotta:bootstrap
CVE-2023-37957 Vulnerability in maven package io.jenkins.plugins:pipeline-restful-api
CVE-2022-21830 Vulnerability in npm package @rocket.chat/livechat
CVE-2021-21428 Vulnerability in maven package org.openapitools:openapi-generator-online
CVE-2019-10744 Vulnerability in maven package org.webjars.bowergithub.lodash:lodash