{"action":"Upgrade org.xwiki.platform:xwiki-platform-oldcore to 12.10.6 (12.x) or 13.3RC1 (13.x) or later.","affected":[{"fixed":"12.10.6","introduced":"0"},{"fixed":"13.3RC1","introduced":"13.0"}],"component":"org.xwiki.platform:xwiki-platform-oldcore","cve_ids":["CVE-2021-43841"],"ecosystem":"Maven","epss":0.0087,"exploited":false,"fixed_versions":["12.10.6","13.3RC1"],"ghsa_id":"GHSA-9jq9-c2cv-pcrj","id":"tcs_01M5N8Q835RRJMFAE0KQX3G95D","modified_at":"2026-07-08T06:27:32.259940237Z","published_at":"2022-02-10T22:42:48Z","references":["https://osv.dev/vulnerability/GHSA-9jq9-c2cv-pcrj","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-9jq9-c2cv-pcrj","https://nvd.nist.gov/vuln/detail/CVE-2021-43841","https://github.com/xwiki/xwiki-platform/commit/5853d492b3a274db0d94d560e2a5ea988a271c62","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-18368","https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Attachments#HAttachmentdisplayordownload"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GHSA-9jq9-c2cv-pcrj","url":"https://osv.dev/vulnerability/GHSA-9jq9-c2cv-pcrj"}],"summary":"Cross-site Scripting by SVG upload in xwiki-platform"}