CVE-2023-46732

creationtimestamp| type| source ---|---|--- 2023-11-06 22:26:03+00:00| seen| https://t.me/cibsecurity/73637...

CVE-2023-46732 Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to reflected cross-site scripting RXSS via the rev parameter that is used in the content of the content menu without escaping. If an attacker can convince a user to visit a...

CVE-2023-46732

The XWiki Platform is vulnerable to reflected cross-site scripting (RXSS) because the rev parameter in the content menu is used without proper escaping. An attacker who can trick a user into visiting a link with a crafted parameter can execute arbitrary actions in the user's name. This may lead t...