Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-27603

XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations

Description

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. This vulnerability is fixed in 1.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

xwikisas application-confluence-migrator-pro

  • > 1.0, < 1.2.0affected

References