xwiki__xwiki-rendering_CVE-2023-32070_14-5

XWiki Rendering XWiki Rendering es un sistema de renderizado genérico que convierte la entrada textual en una sintaxis determinada sintaxis wiki, HTML, etc. en otra sintaxis XHTML, etc.. XWiki Platform, XWiki Commons y XWiki Rendering forman parte de la forja de software de XWiki.org. Se publican...

CVE-2023-32070 Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting XSS attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. Ther...