pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources
Type
maven
Namespace
org.xwiki.platform
Name
xwiki-platform-flamingo-skin-resources
Known advisories, vulnerabilities and fixes for org.xwiki.platform/xwiki-platform-flamingo-skin-resources package.
Critical
4
High
1
| Type | Version | Distribution | # CVEs | # Advisory ID | Title | Severity | Published |
|---|---|---|---|---|---|---|---|
| Affected | >= 14.5, < 14.9 >= 14.0-rc-1, < 14.4.6 >= 1.9-milestone-2, < 13.10.10 |
CVE-2023-29207
|
 MAVEN:GHSA-6VGH-9R3C-2CXP
|
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro | high |
2023-04-12T20:43:21
(17 months ago) |
|
| Fixed | = 14.9 = 14.4.6 = 13.10.10 |
CVE-2023-29207
|
MAVEN:GHSA-6VGH-9R3C-2CXP
|
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro | high |
2023-04-12T20:43:21
(17 months ago) |
|
| Affected | >= 15.0-rc-0, < 15.1 >= 6.0-rc-1, < 14.10.6 |
CVE-2023-35156
|
MAVEN:GHSA-834C-X29C-F42C
|
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template | critical |
2023-06-22T19:59:10
(15 months ago) |
|
| Fixed | = 15.1 = 14.10.6 |
CVE-2023-35156
|
MAVEN:GHSA-834C-X29C-F42C
|
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template | critical |
2023-06-22T19:59:10
(15 months ago) |
|
| Affected | >= 15.0-rc-1, < 15.5.1 >= 9.7-rc-1, < 14.10.14 |
CVE-2023-46732
|
MAVEN:GHSA-J9RC-W3WV-FV62
|
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu | critical |
2023-11-08T14:51:37
(10 months ago) |
|
| Fixed | = 15.5.1 = 14.10.14 |
CVE-2023-46732
|
MAVEN:GHSA-J9RC-W3WV-FV62
|
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu | critical |
2023-11-08T14:51:37
(10 months ago) |
|
| Affected | >= 15.0-rc-1, < 15.1-rc-1 >= 9.4-rc-1, < 14.10.5 |
CVE-2023-35158
|
MAVEN:GHSA-MWXJ-G7FW-7HC8
|
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template | critical |
2023-06-22T19:59:33
(15 months ago) |
|
| Fixed | = 15.1-rc-1 = 14.10.5 |
CVE-2023-35158
|
MAVEN:GHSA-MWXJ-G7FW-7HC8
|
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template | critical |
2023-06-22T19:59:33
(15 months ago) |
|
| Affected | >= 15.0-rc-1, < 15.1-rc-1 >= 6.1-rc-1, < 14.10.5 |
CVE-2023-35162
|
MAVEN:GHSA-Q9HG-9QJ2-MXF9
|
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template | critical |
2023-06-20T17:42:16
(15 months ago) |
|
| Fixed | = 15.1-rc-1 = 14.10.5 |
CVE-2023-35162
|
MAVEN:GHSA-Q9HG-9QJ2-MXF9
|
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template | critical |
2023-06-20T17:42:16
(15 months ago) |