| Package | Affected versions | Patched versions |
|---|---|---|
| org.xwiki.commons:xwiki-commons | < 12.10.3 | 12.10.3 |
| xwiki | = 12.10.2 |
XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free