https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:56:23.094032+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-32070 CVE-2023-32070 — Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers 2026-10-06T01:56:23.095974+00:00

Affected: xwiki-rendering

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version.