medium5.4
CVE-2021-3137
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Impact
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xwiki | Xwiki | Version 12.10.2 |