Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.platform:xwiki-platform-flamingo-skin-resources

6 known vulnerabilities (4 critical, 1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 4 critical, 1 high, 1 medium
Registry
Maven Central

Advisories 6

  • CVE-2025-66472Medium 6.5

    XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication

    Affected: from 6.2-milestone-1, fixed in 16.10.10; from 17.0.0-rc-1, fixed in 17.4.2.

  • CVE-2023-46732Critical 9.7

    Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform

    Affected: from 9.7-rc-1, fixed in 14.10.14; from 15.0-rc-1, fixed in 15.5.1.

  • CVE-2023-35162Critical 9.7

    XPlatform Wiki vulnerable to cross-site scripting via xcontinue parameter in preview actions template

    Affected: from 6.1-rc-1, fixed in 14.10.5; from 15.0-rc-1, fixed in 15.1-rc-1.

  • CVE-2023-35158Critical 9.7

    XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template

    Affected: from 9.4-rc-1, fixed in 14.10.5; from 15.0-rc-1, fixed in 15.1-rc-1.

  • CVE-2023-35156Critical 9.7

    XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template

    Affected: from 6.0-rc-1, fixed in 14.10.6; from 15.0-rc-0, fixed in 15.1.

  • Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro

    Affected: from 1.9-milestone-2, fixed in 13.10.10; from 14.0-rc-1, fixed in 14.4.6; from 14.5, fixed in 14.9.