Description
XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Request Forgery (CSRF) attack for adding or removing tags on XWiki pages. The problem has been patched in XWiki 13.10.5 and 14.3. As a workaround, one may locally modify the `documentTags.vm` template in one's filesystem, to apply the changes exposed there.
Remediation
References
Related Vulnerabilities
WordPress Other Vulnerability (CVE-2007-1244)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-20281)
WordPress Plugin Best Seo Remote Code Execution (1.5)
WordPress Plugin Simple Sticky Footer Cross-Site Request Forgery (1.3.2)
WordPress Plugin WP Easy Columns Cross-Site Scripting (2.1.3)