CVE Catalog
CVE-2023-34408
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.74%
50th percentile - higher than 50% of all known CVEs
Summary
DokuWiki before version 2023-04-04a allows XSS via RSS titles.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.
Recommendation
It is recommended to update DokuWiki to version 2023-04-04a or later to mitigate this vulnerability.
Original NVD description (English source)
DokuWiki before 2023-04-04a allows XSS via RSS titles.