CVE-2025-49583

XWiki is a generic wiki platform. When a user without script right creates a document with an "XWiki.Notifications.Code.NotificationEmailRendererClass" object, and later an admin edits and saves that document, the email templates in this object will be used for notifications. No malicious code ca...