The vulnerability of the com.xwiki.identity-oauth:identity-oauth-ui package in the XWiki Platform. XWiki allows a perpetrator to carry out XSS attacks.

The vulnerability of the com.xwiki.identity-oauth:identity-oauth-ui package in the XWiki Platform involves a lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow an attacker to perform cross-site scripting XSS attacks remotely...

CVE-2023-45144: Improper Neutralization of Input During Web Page Generation

com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user logs in via the OAuth method, the identityOAuth parameters sent in the GET request is vulnerable to cross site scripting XSS and XWiki syntax...