← Back to browse · API

CVE-2023-35166

Severity
CRITICAL
CVSS
10.0
EPSS
0.6312
Risk score
62.09
CISA KEV
No
PoC
No
Published
2023-06-20
Modified
2024-12-06
First seen
2026-08-07
Aliases
EUVD-2023-1816, GHSA-H7CW-44VP-JQ7H
Products
xwiki:xwiki-platform 15.0-rc-1, < 15.1-rc-1, xwiki:xwiki-platform 8.1-milestone-1, < 14.10.5
Sources
euvd EUVD-2023-1816

Description

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.

References