CVE-2023-36471

CVE-2023-36471 is a medium-severity vulnerability affecting XWiki Commons, where the HTML sanitizer incorrectly allowed form and input tags. This flaw could enable an attacker without script rights to craft phishing forms or, in specific scenarios involving an administrator, achieve remote code execution through manipulated input fields. The vulnerability has a CVSS score of 5.4 (Medium), indicating a network-based attack requiring low privileges and user interaction, with potential for low confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.