{"id":"CVE-2023-34408","details":"DokuWiki before 2023-04-04a allows XSS via RSS titles.","aliases":["BIT-dokuwiki-2023-34408"],"modified":"2026-08-12T03:51:28.748648056Z","published":"2023-06-05T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34408.json"},"references":[{"type":"WEB","url":"https://github.com/dokuwiki/dokuwiki/compare/release-2023-04-04...release-2023-04-04a"},{"type":"WEB","url":"https://huntr.dev/bounties/c6119106-1a5c-464c-94dd-ee7c5d0bece0/"},{"type":"WEB","url":"https://www.github.com/splitbrain/dokuwiki/commit/53df38b0e4465894a67a5890f74a6f5f82e827de"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34408.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34408"},{"type":"FIX","url":"https://github.com/dokuwiki/dokuwiki/pull/3967"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/dokuwiki/dokuwiki","events":[{"introduced":"0"},{"fixed":"871aaf69ac1868037618747e232aa177cf2225d8"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2023-04-04a"}],"source":["DESCRIPTION","CPE_RANGE"],"cpe":"cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*"}}],"versions":["release-2023-04-04","release-2022-07-31a","release-2022-07-31","release-2022-06-26rc","release-2020-07-29","release-2020-06-09rc","release-2020-06-03rc","release-2020-06-01rc","release-2018-04-22c","release-2018-04-22b","release-2018-04-22a","release-2018-04-22","release-2017-02-19e","release-2017-02-19d","release-2017-02-19c","release-2017-02-19b","release-2017-02-19a","release-2017-02-19","release-2016-06-26a","release-2016-06-26","release-2015-08-10a","release-2015-08-10","release-2014_09_29d","release-2014_09_29c","release-2014_09_29b","release-2014-09-29a","release-2014-09-29","release-2014-05-05a","release-2014-05-05","release-2013-12-08","release-2013-11-18rc","release-2013-10-28rc","release-2013-05-10a","release-2013-05-10","release-2013_03_06rc","release-2012-10-13","release-2012_09_10rc","release-2012-01-25b","release-2012-01-25","release-2011-11-10rc","release-2011_05_25a","release-2010-11-07a","release-2011_05_25","release-2010-11-07","release-2010-10-27rc","release-2010-10-07rc","release-2009-12-25","release-2009-12-02rc","release-2009-02-14","release-2009-02-06rc","release-2009-01-30rc","release-2009-01-26rc","release-2008-05-05","release-2008-05-04","release-2008-04-11rc","release-2008-03-31rc","release-2007-06-26","release-2007-05-24rc","release-2006-11-06","release-2006-10-19rc","release-2006-10-08rc","release-2006-09-28rc","release-2006-03-09","release-2006-03-05","release-2005-09-22","release-2005-09-19","release-2005-07-13","release-2005-07-01"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-34408.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}