← All advisories

Medium severity5.4NVD Advisory· Published Sep 28, 2018· Updated Jun 17, 2026

CVE-2018-16277

CVE-2018-16277

Description

The Image Import function in XWiki through 10.7 has XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.xwiki.platform:xwiki-platformMaven	<= 10.7	—

Affected products

2

Cryptpad/Xwiki
cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*
Range: <=10.7
ghsa-coords
pkg:maven/org.xwiki.platform/xwiki-platform
Range: <= 10.7

Patches

Vulnerability mechanics

References

4

mksec.tk/index.php/2018/09/27/cve-2018-16277-xss-in-xwiki/nvdExploitThird Party Advisory
github.com/advisories/GHSA-6mvr-cq72-f66vghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-16277ghsaADVISORY
mksec.tk/index.php/2018/09/27/cve-2018-16277-xss-in-xwikighsaWEB

News mentions

0

No linked articles in our index yet.