Xwiki · Cryptpad · CVE-2017-1000051
**Name of the Vulnerable Software and Affected Versions**
XWiki labs CryptPad versions prior to 1.1.1
**Description**
A cross-site scripting (XSS) issue exists in the pad export feature of XWiki labs CryptPad, allowing remote attackers to inject arbitrary web script or HTML via the pad content.
**Recommendations**
For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue.