Media
CVE-2026-48047
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 34
Restablecer filtros
Media
CVE-2026-40105
XWiki has Reflected Cross-Site Scripting (XSS) in page history compare
Media
CVE-2026-26000
XWiki vulnerable to click-jacking through CSS injection in comments
Media
CVE-2026-24128
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
Media
CVE-2025-66472
XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication
Crítica
CVE-2025-55747
XWiki configuration files can be accessed through the webjars API
Media
CVE-2025-32430
XWiki allows Reflected XSS in two templates
Crítica
CVE-2024-43401
In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them
Crítica
CVE-2024-41947
XWiki Platform vulnerable to Cross-Site Scripting (XSS) through conflict resolution
Alta
CVE-2024-37900
XWiki Platform vulnerable to Cross-site Scripting through attachment filename in uploader
Crítica
CVE-2023-45137
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages
Crítica
CVE-2023-45136
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
Crítica
CVE-2023-45135
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
Crítica
CVE-2023-45134
XWiki Platform XSS vulnerability from account in the create page form via template provider
Media
CVE-2023-40176
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
Crítica
CVE-2023-35160
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
Crítica
CVE-2023-35159
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
Crítica
CVE-2023-34464
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
Media
CVE-2023-29513
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
Crítica
CVE-2023-29512
xwiki-platform-web-templates vulnerable to Eval Injection
Alta
CVE-2023-29207
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
Baja
CVE-2023-29203
Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm
Media
CVE-2023-26473
Unprivileged XWiki Platform users can make arbitrary select queries using DatabaseListProperty and suggest.vm
Media
CVE-2022-36095
XWiki Cross-Site Request Forgery (CSRF) for actions on tags
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.