Description
XWiki Platform is a generic wiki platform. Starting in version 12.10, a user without script rights can introduce a stored cross-site scripting by using the Live Data macro. This has been patched in XWiki 14.9, 14.4.7, and 13.10.10. There are no known workarounds.
Remediation
References
Related Vulnerabilities
phpMyAdmin Other Vulnerability (CVE-2006-2418)
Plone CMS CVE-2024-23756 Vulnerability (CVE-2024-23756)
WordPress Plugin NextGEN Gallery-WordPress Gallery Arbitrary File Upload (1.9.12)
Jenkins Deserialization of Untrusted Data Vulnerability (CVE-2018-1000861)
TYPO3 Cleartext Transmission of Sensitive Information Vulnerability (CVE-2017-6370)