pkg:Maven/org.xwiki.platform:xwiki-platform-skin-skinx

All known vulnerabilities

• CRITICAL9.0CVE-2023-29206org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins
  >= 3.0-milestone-1, < 14.9-rc-1
• MEDIUM6.8CVE-2022-24821Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx
  >= 13.5.0, < 13.10
• MEDIUM6.8CVE-2022-23620Path traversal in xwiki-platform-skin-skinx
  >= 6.2-rc-1, < 13.6
• —XWiki configuration files can be accessed through jsx and sx endpoints
  >= 4.2-milestone-2, < 16.10.7