PT-2026-51436

Name of the Vulnerable Software and Affected Versions XWiki Remote Macros versions 1.13 through 1.14.4 Description The excerpt-include macro fails to properly escape the title of the included page and executes excerpt content using the macro's privileges. This allows for syntax injection via the...

EUVD-2021-0708

Malware in sbrugna...

CVE-2021-21379

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform, the wikimacrocontent executes the content with the rights of the wiki macro author instead of the caller of that wiki macro. This makes possible to inje...