XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template

Impact Any user who can edit a document in a wiki like the user profile can create a stored XSS attack by putting plain HTML code into that document and then tricking another user to visit that document with the displaycontent or rendercontent template and plain output syntax. For example, edit a...