CVE-2023-37462

The XWiki Platform is vulnerable to an eval injection vulnerability due to improper escaping in the SkinsCode.XWikiSkinsSheet document. This flaw allows an attacker to escalate privileges from view rights to programming rights , enabling remote code execution (RCE) through arbitrary script macros...