1 matches found
CVE-2023-50721: Improper Neutralization of Directives in Dynamically Evaluated Code
XWiki Platform is a generic wiki platform. Starting in 4.5-rc-1 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the search administration interface doesn't properly escape the id and label of search user interface extensions, allowing the injection of XWiki syntax containing script macros...
9.9CVSS8.1AI score0.78812EPSS
SaveExploits0References4
20