Description
Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute.
Remediation
References
Related Vulnerabilities
Drupal Core 8.x Multiple Security Bypass Vulnerabilities (8.0.0 - 8.3.6)
WordPress Plugin External Media without Import Cross-Site Scripting (1.0.1)
Oracle JRE CVE-2024-20926 Vulnerability (CVE-2024-20926)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0113)
SharePoint Improper Authorization Vulnerability (CVE-2025-49701)