Exploit for Cross-site Scripting in Xwiki Commons_6276B3AF-472D-5204-999D-C8E1355D5525

{
    "lastseen": "2025-08-18T21:27:28",
    "description": "# XWiki Commons\n\n[XWiki Commons](http://commons.xwiki.org/xwiki/bin/view/Main/) are technical libraries common to several other top level XWiki projects. \n\nThese libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain.\n\nXWiki Platform, XWiki Commons and XWiki Rendering are part of the [XWiki.org](http://www.xwiki.org/) software forge. They are released together and share the same version.\n\n## Documentation\n* [Documentation](http://commons.xwiki.org/)\n* [API](http://platform.xwiki.org/xwiki/bin/view/DevGuide/API)\n* [Development Zone](http://dev.xwiki.org/xwiki/bin/view/Community/)\n\n## Download\nThe XWiki Commons JARs are available in the [![Maven Central Repository](https://img.shields.io/maven-central/v/org.xwiki.commons/xwiki-commons.svg?maxAge=3600)](http://search.maven.org/#search|ga|1|g%3A%22org.xwiki.commons%22).\n\n## Release Notes\nRead our [Release Notes](http://www.xwiki.org/xwiki/bin/view/ReleaseNotes/).\n\n## Tools\n* [Continuous Integration](http://ci.xwiki.org/) setup launches a build for each commit\n* [Issue Tracker](http://jira.xwiki.org/browse/XCOMMONS) if you want to report an issue\n* [Development Flow](http://dev.xwiki.org/xwiki/bin/view/Community/DevelopmentPractices#HGeneralDevelopmentFlow) to see the full list of tools we use to build XWiki\n* [![Revved up by Gradle Enterprise](https://img.shields.io/badge/Revved%20up%20by-Gradle%20Enterprise-06A0CE?logo=Gradle&labelColor=02303A)](https://ge.xwiki.org/scans)\n\n## Community\nWe're always looking for contributors! \nYou should read our [Get Involved Guide](http://dev.xwiki.org/xwiki/bin/view/Community/Contributing) or get in touch:\n* [Blog](http://www.xwiki.org/xwiki/bin/view/Blog/)\n* [Forum](https://dev.xwiki.org/xwiki/bin/view/Community/Discuss)\n* [Chat](https://dev.xwiki.org/xwiki/bin/view/Community/Chat)\n",
    "published": "2025-08-16T14:32:44",
    "modified": "2025-08-16T14:34:10",
    "type": "githubexploit",
    "title": "Exploit for Cross-site Scripting in Xwiki Commons",
    "source": "",
    "references": "",
    "id": "6276B3AF-472D-5204-999D-C8E1355D5525",
    "bulletinFamily": "exploit",
    "cwe": null,
    "cvelist": [
        "CVE-2023-36471"
    ],
    "sourceData": "",
    "sourceHref": "",
    "cvss": {
        "score": 9,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "https://github.com/shoucheng3/xwiki__xwiki-commons_CVE-2023-36471_14-10-5",
    "category_name": "Exploit",
    "post_link": "",
    "product": "",
    "version": "",
    "vendor": "",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}