Vulnerability CVE-2023-28152
Published: 2023-03-24

Description:
An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.

 References:
https://www.independentsoft.de/jword/index.html
https://excellium-services.com/cert-xlm-advisory/CVE-2023-28152
Copyright 2026, cxsecurity.com

 

Back to Top