GHSA-FC42-5W56-QW7H XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet

Impact It's possible to execute anything with the right of the Scheduler Application sheet page. To reproduce: 1. As a user without script or programming rights, edit your user profile with the object editor and add a new object of type XWiki.SchedulerJobClass search for "Scheduler" 1. In "Job...