Vuln
·
Scope
Home
Packages
KEV
Critical
Insights
EN
中
Loading…
pkg:Maven/
org.xwiki.platform:xwiki-platform-appwithinminutes-ui
5 total CVEs
CRITICAL
4
MEDIUM
1
✅ Check your installed version
Check
All known vulnerabilities
CRITICAL
9.9
CVE-2023-40177
XWiki Platform privilege escalation (PR) from account through AWM content fields
>= 4.3-milestone-2, < 14.10.5
CRITICAL
9.9
CVE-2023-29527
XWiki Platform vulnerable to code injection from account through AWM view sheet
>= 7.4.4, < 14.10.3
CRITICAL
9.6
CVE-2023-35161
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
>= 6.2-milestone-1, < 14.10.5
CRITICAL
9.0
XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters
>= 5.4.4, < 14.4.8
MEDIUM
5.4
XWiki App Within Minutes app grants space admin rights that allows cross-site scripting
>= 4.2-milestone-1, < 13.10.11
Maven/org.xwiki.platform:xwiki-platform-appwithinminutes-ui — 5 CVEs · VulnScope
CVE-2023-35153
CVE-2023-29515