📦 Commons

by Xwiki

🔍 What is Commons?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-36471

CRITICAL CVSS 9.0 Jun 29, 2023

XWiki Commons HTML sanitizer vulnerability allows attackers without script rights to create phishing forms or embed malicious inputs that could lead to remote code execution when submitted by administ...

CVE-2023-29528

CRITICAL CVSS 9.0 Apr 20, 2023

This vulnerability allows cross-site scripting (XSS) via invalid HTML comments in XWiki's restricted HTML cleaner mode. When exploited, it enables JavaScript injection that can lead to server-side cod...