CVE-2021-3137

XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section

published January 20, 2021

CVSS
—
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00744 · 54.2th percentile
Published
2021-01-20T03:17Z
EPSS history
Timeline
  • 20 JAN 03:17Z
    XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section
    cvelistv5