Product

org.xwiki.rendering/xwiki-rendering-syntax-annotatedhtml5 vulnerabilities

1 published CVE affecting org.xwiki.rendering/xwiki-rendering-syntax-annotatedhtml5, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.xwiki.rendering/xwiki-rendering-syntax-annotatedhtml5 CVEs

Newest publication first

CVE-2023-32070 Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
Published 2023-05-10

MediumCVSS 6.1 EPSS 0.65%

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XW...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.xwiki.rendering/xwiki-rendering-syntax-annotatedhtml5 vulnerabilities

Latest org.xwiki.rendering/xwiki-rendering-syntax-annotatedhtml5 CVEs

CVE-2023-32070 Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers