VYPR

XWiki Platform Live Data Live Table Connector

by Cryptpad

CVEs (1)

  • CVE-2026-53966higAug 19, 2026
    risk 0.38cvss epss

    ### Impact Any user who can edit a page in XWiki can use Live Data's edit REST API in XWiki to change the rights on that page. This allows the user to obtain script right on the page. Script right allows the user to execute potentially dangerous Velocity scripts and send…