CVE-2025-27603

Publication date

2025-03-07 16:06:39

Family

GitHub_M

State

PUBLISHED

Description

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesnt have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. This vulnerability is fixed in 1.2.0.