XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-3137 - Vulnerability Database

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-3137

Medium

Reference: CVE-2021-3137

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-3137

Title: XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.