Количество 3
Количество 3
CVE-2026-26000
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's possible using comments to inject CSS that would transform the full wiki in a link area leading to a malicious page. This vulnerability is fixed in 17.9.0, 17.4.6, and 16.10.13.
GHSA-74rh-c5rh-88vg
XWiki vulnerable to click-jacking through CSS injection in comments
BDU:2026-02020
Уязвимость платформы создания совместных веб-приложений XWiki Platform XWiki, позволяющая нарушителю реализовать атаку типа CSS Injection
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-26000 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's possible using comments to inject CSS that would transform the full wiki in a link area leading to a malicious page. This vulnerability is fixed in 17.9.0, 17.4.6, and 16.10.13. | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| GHSA-74rh-c5rh-88vg XWiki vulnerable to click-jacking through CSS injection in comments | 0% Низкий | 6 месяцев назад | |
 | BDU:2026-02020 Уязвимость платформы создания совместных веб-приложений XWiki Platform XWiki, позволяющая нарушителю реализовать атаку типа CSS Injection | CVSS3: 6.3 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу