GHSA-9875-CW22-F7CX XWiki allows remote code execution through default value of wiki macro wiki-type parameters
Impact Any user with edit right on a page could be the user's profile can execute code Groovy, Python, Velocity with programming right by defining a wiki macro. This allows full access to the whole XWiki installation and thus impacts its confidentiality, integrity and availability. The main probl...