{"action":"Upgrade org.xwiki.platform:xwiki-platform-rendering-wikimacro-store to 11.10.11 (11.10.x), 12.6.3 (12.6.x) or 12.8 (12.8.x) or later.","affected":[{"fixed":"11.10.11","introduced":"11.4"},{"fixed":"12.6.3","introduced":"12.0"},{"fixed":"12.8","introduced":"12.7"}],"component":"org.xwiki.platform:xwiki-platform-rendering-wikimacro-store","cve_ids":["CVE-2021-21379"],"ecosystem":"Maven","epss":0.00476,"exploited":false,"fixed_versions":["11.10.11","12.6.3","12.8"],"ghsa_id":"GHSA-v662-xpcc-9xf6","id":"tcs_01M5N9DC4N659G0T9ZGKM95MVP","modified_at":"2026-07-08T06:00:31.129515872Z","published_at":"2021-03-23T22:47:26Z","references":["https://osv.dev/vulnerability/GHSA-v662-xpcc-9xf6","https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v662-xpcc-9xf6","https://nvd.nist.gov/vuln/detail/CVE-2021-21379","https://jira.xwiki.org/browse/XWIKI-17759"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-v662-xpcc-9xf6","url":"https://osv.dev/vulnerability/GHSA-v662-xpcc-9xf6"}],"summary":"It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro"}