Xwiki CVE-2020-13654

HIGH

Improper Encoding or Escaping of Output (CWE-116)

2020-12-31 cve@mitre.org

Information Disclosure Xwiki

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Dec 31, 2020 - 01:15 nvd

HIGH 7.5

DescriptionNVD

XWiki Platform before 12.8 mishandles escaping in the property displayer.

AnalysisAI

XWiki Platform before 12.8 mishandles escaping in the property displayer. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-116. XWiki Platform before 12.8 mishandles escaping in the property displayer. Affected products include: Xwiki. Version information: before 12.8.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Xwiki

View all

CVE-2025-24893 CRITICAL Act Now POC

XWiki Platform allows unauthenticated remote code execution through the SolrSearch endpoint, enabling guests to execute

CVE-2024-21650 CRITICAL Act Now POC

XWiki Platform prior to specific patched versions contains a CVSS 10.0 remote code execution vulnerability through the u

CVE-2025-32969 CRITICAL Act Now POC

XWiki is a generic wiki platform. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no aut

CVE-2023-27479 CRITICAL Act Now POC

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Rated critical

CVE-2024-31996 CRITICAL Act Now POC

XWiki Platform is a generic wiki platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitabl

CVE-2024-31982 CRITICAL Act Now POC

XWiki Platform is a generic wiki platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitabl

CVE-2023-46731 CRITICAL Act Now POC

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Rated critical

CVE-2023-26477 CRITICAL Act Now POC

XWiki Platform is a generic wiki platform. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitabl

CVE-2025-49586 HIGH This Week POC

A remote code execution vulnerability in XWiki (CVSS 8.8). Risk factors: public PoC available. Vendor patch is available

CVE-2025-55747 CRITICAL Act Now POC

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Rated critical

CVE-2025-46558 CRITICAL Act Now POC

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown.

CVE-2023-45136 CRITICAL Act Now POC

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Rated critical

Same weakness CWE-116 – Improper Encoding or Escaping of Output

View all

CVE-2013-4547 HIGH POC

CVE-2026-20245 HIGH POC

CVE-2022-36446 CRITICAL POC

CVE-2017-8303 CRITICAL POC

CVE-2022-30781 HIGH POC

CVE-2023-46301 CRITICAL POC

CVE-2023-46300 CRITICAL POC

CVE-2022-41443 CRITICAL POC

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

CVE-2023-7028 CRITICAL POC

CVE-2017-0213 HIGH POC

Share

CVE-2020-13654 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy