1 matches found
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
Impact The footnote macro executed its content in a potentially different context than the one in which it was defined. In particular in combination with the include macro, this allows privilege escalation from a simple user account in XWiki to programming rights and thus remote code execution,...
9.9CVSS7.6AI score0.01247EPSS
SaveExploits1References5Affected Software2
20