CVE-2023-36471

🗓️ 23 May 2025 02:29:06Reported by redhat.comType

Critical security flaw in XWiki allows input HTML tags, risking phishing and remote code execution.

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Xwiki Commons modules on the XWiki platform, which is used for creating collaborative web applications. This allows a hacker to execute arbitrary code.	7 Sep 202300:00	–	bdu_fstec
Circl	CVE-2023-36471	30 Jun 202300:14	–	circl
CNNVD	XWiki Commons 跨站脚本漏洞	29 Jun 202300:00	–	cnnvd
CVE	CVE-2023-36471	29 Jun 202319:44	–	cve
Cvelist	CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml	29 Jun 202319:44	–	cvelist
EUVD	EUVD-2023-1714	3 Oct 202520:07	–	euvd
Github Security Blog	org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted	30 Jun 202320:41	–	github
NVD	CVE-2023-36471	29 Jun 202320:15	–	nvd
OSV	CVE-2023-36471 HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml	29 Jun 202319:44	–	osv
OSV	GHSA-6PQF-C99P-758V org.xwiki.commons:xwiki-commons-xml's HTML sanitizer allows form elements in restricted	30 Jun 202320:41	–	osv