CVE-2025-27603

creationtimestamp| type| source ---|---|--- 2025-03-07 17:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114122406631526554 2025-03-07 18:01:34+00:00| seen| Telegram/MKyyCJNfVvpUH0PEmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ 2025-03-07 18:17:16+00:00| seen|...

CVE-2025-27603

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. This vulnerability is fixed in 1.2.0...

CVE-2025-27603 XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. This vulnerability is fixed in 1.2.0...