CVE-2023-35155 PoC — XWiki Platform 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35155.yaml

Associated Vulnerability

Title:XWiki Platform 跨站脚本漏洞 (CVE-2023-35155)
Description:XWiki Platform是法国XWiki基金会的一套用于创建Web协作应用程序的Wiki平台。 XWiki Platform存在跨站脚本漏洞，该漏洞源于。受影响的产品和版本：XWiki Platform 2.6 RC2及之前版本，2.7 RC1及之前版本。

Description

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS).

File Snapshot


 id: CVE-2023-35155

info:
  name: XWiki - Cross-Site Scripting
  author: ritikchaddha
  severity: me

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!