org.xwiki.rendering:xwiki-rendering-macro-html (5.4-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (5.4-milestone-1) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (5.4-milestone-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 5.4-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html...

org.xwiki.rendering:xwiki-rendering-macro-html (4.4-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (4.4-rc-1) +2 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.4-rc-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.4-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.4-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.6-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (13.6-rc-1) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (13.6-rc-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 13.6-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.6-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.11.3), org.xwiki.rendering:xwiki-rendering-standalone (9.11.3) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (9.11.3)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 9.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.11.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (12.3-rc-1) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (12.3-rc-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 12.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.4.2), org.xwiki.rendering:xwiki-rendering-standalone (8.4.2) +5 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (8.4.2)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 8.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.4.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.9), org.xwiki.rendering:xwiki-rendering-standalone (11.9) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (11.9)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 11.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.9 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.11), org.xwiki.rendering:xwiki-rendering-standalone (10.11.11) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (10.11.11)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 10.11.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.11 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.8.3), org.xwiki.rendering:xwiki-rendering-standalone (10.8.3) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (10.8.3)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 10.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.8.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.7-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (13.7-rc-1) +4 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (13.7-rc-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 13.7-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.7-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.0), org.xwiki.rendering:xwiki-rendering-standalone (7.0) +7 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (7.0)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.0 -...

PT-2023-26177 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions 14.6-rc-1 through 14.10.3 XWiki versions prior to 15.0 RC1 Description: The issue concerns the cleaning of attributes during XHTML rendering in XWiki, which allowed the injection of arbitrary HTML code and thus cross-site...

org.xwiki.rendering:xwiki-rendering-macro-html (>=3.2-milestone-3, <=14.5), org.xwiki.rendering:xwiki-rendering-standalone (>=4.4-rc-1, <=14.5) +9 more potentially affected by CVE-2023-32070 via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (>=3.2-milestone-3, <=14.5)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version =3.2-milestone-3, =3.2-milestone-3, =4.4-rc-1, =6.4-milestone-3, =4.5-milestone-1, =5.4.5, =4.1-milestone-1, =6.4-milestone-3, =4.1-milestone-1, =5.2-rc-1, =5.2-rc-1, =14.1-rc-1, =14.5 Source cves: CVE-2023-32070 Source advisory:...

SUSE CVE-2005-2269

Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as...

SUSE CVE-2016-9107

The OTR plugin for Gajim sends information in cleartext when using XHTML, which allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2022-37307

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...

CVE-2022-37307

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...

Cross site scripting

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...

CVE-2022-37307: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...

CVE-2022-37307

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...