CVE-2022-36098

Summary (concrete): XWiki Platform Mentions UI allows storing Javascript or groovy scripts in mention/macro anchor/reference fields in versions prior to 13.10.6 and 14.4 (starting with 12.5-rc-1). The stored code is executed when a page with the mention is visited, enabling cross-site scripting. ...