1 matches found
CVE-2023-26055: Improper Neutralization of Escape, Meta, or Control Sequences
XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-milestone-1, any user can edit their own profile and inject code, which is going to be executed with programming right. The same vulnerability can also be exploited in all other places...
9.9CVSS5.7AI score0.01163EPSS
SaveExploits1References2
20