VYPR

Rendering

by Cryptpad

CVEs (1)

  • CVE-2023-32070CriMay 10, 2023
    risk 0.52cvss 9.0epss 0.01

    XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in…