{"action":"Upgrade org.xwiki.platform:xwiki-platform-web-templates to 15.10-rc-1 or later.","affected":[{"fixed":"15.10-rc-1","introduced":"0"}],"component":"org.xwiki.platform:xwiki-platform-web-templates","cve_ids":["CVE-2024-43401"],"ecosystem":"Maven","epss":0.00677,"exploited":false,"fixed_versions":["15.10-rc-1"],"ghsa_id":"GHSA-f963-4cq8-2gw7","id":"tcs_01M5N8VK09PVHC8BMKYY82GHNZ","modified_at":"2024-08-19T22:12:04.199287Z","published_at":"2024-08-19T21:49:15Z","references":["https://osv.dev/vulnerability/GHSA-f963-4cq8-2gw7","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-f963-4cq8-2gw7","https://nvd.nist.gov/vuln/detail/CVE-2024-43401","https://github.com/xwiki/xwiki-platform","https://jira.xwiki.org/browse/XWIKI-20331","https://jira.xwiki.org/browse/XWIKI-21311","https://jira.xwiki.org/browse/XWIKI-21481","https://jira.xwiki.org/browse/XWIKI-21482","https://jira.xwiki.org/browse/XWIKI-21483","https://jira.xwiki.org/browse/XWIKI-21484","https://jira.xwiki.org/browse/XWIKI-21485","https://jira.xwiki.org/browse/XWIKI-21486","https://jira.xwiki.org/browse/XWIKI-21487","https://jira.xwiki.org/browse/XWIKI-21488","https://jira.xwiki.org/browse/XWIKI-21489","https://jira.xwiki.org/browse/XWIKI-21490"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-f963-4cq8-2gw7","url":"https://osv.dev/vulnerability/GHSA-f963-4cq8-2gw7"}],"summary":"In XWiki Platform, payloads stored in content is executed when a user with script/programming right edit them"}