[jira@xwiki.org][Issue] Updates for XWIKI-23490: Stored XSS in XWiki profile photo upload with SVG
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-23592: Reflected XSS via parameters extensionId and extensionVersionConstraint on endpoint
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-20130: xredirect parameter can be used for phishing
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-19160: SQL Injection for the sort parameter in getdocuments template
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-8331: The REST API doesn't mask private information such as passwords or email addresses
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-15463: XSS in several profile fields
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-21109: Wiki Pretty name content is executed in the Administration of a subwiki he created
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-17795: Stored XSS on user profile page
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-14294: Cross Site Scripting - Stored
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0
[jira@xwiki.org][Issue] Updates for XWIKI-18777: XSS via Unvalidated File Upload
by XWiki Notifications 23 Apr '26
by XWiki Notifications 23 Apr '26
23 Apr '26
1
0