xwiki__xwiki-rendering_CVE-2023-32070_14-5

XWiki Rendering XWiki Rendering è un sistema di Rendering generico che converte l'input testuale in una data sintassi sintassi wiki, HTML, ecc. in un'altra sintassi XHTML, ecc.. XWiki Platform, XWiki Commons e XWiki Rendering fanno parte della software forge di XWiki.org. Vengono rilasciati insie...

CVE-2023-32070 Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting XSS attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. Ther...