Astaruf/CVE-2020-13654

PoC

CVE-2020-13654 - XWiki Platform < 12.8 - Stored XSS → CSRF → Account Takeover

view exploit source poc_in_githubauthor Astarufpublished 2026-03-30catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-13654US	high7.5	1.94% (80th)	Exploit	2020-12-31
XWiki Platform before 12.8 mishandles escaping in the property displayer.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.