-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.xwiki.platform:xwiki-platform-rendering-xwiki | maven | < 14.8-rc-1 | 14.8-rc-1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the HTML macro's failure to sanitize script-related HTML tags. The description explicitly states the HTML macro was patched to include systematic cleanup when users don't have script rights, indicating the execute() method in the HTMLMacro class (responsible for processing macro content) was the vulnerable point. The JIRA ticket XWIKI-18568 and its dependency on rendering component improvements (XRENDERING-675) further confirm the rendering layer's HTML macro implementation as the source.