CVE-2023-50722

creationtimestamp| type| source ---|---|--- 2024-01-11 17:37:07+00:00| seen| https://t.me/ctinow/166663...

CVE-2023-50722

CVE-2023-50722 affects XWiki Platform. A reflected XSS or remote code execution exists in the display logic for configurable admin sections, exploitable when an admin visits a crafted URL. Affected versions are prior to 14.10.15, 15.5.2, and 15.7-rc-1. The issue allows full remote code execution ...

CVE-2023-50722 XWiki Platform XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass

XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, there is a reflected XSS or also direct remote code execution vulnerability in the code for displaying configurable admin sections. The code that can be passed through a URL parameter...