{"action":"Upgrade com.xwiki.pro:xwiki-pro-macros to 1.14.5 or later.","affected":[{"fixed":"1.14.5","introduced":"1.13"}],"component":"com.xwiki.pro:xwiki-pro-macros","cve_ids":["CVE-2026-44179"],"ecosystem":"Maven","epss":0.0069,"exploited":false,"fixed_versions":["1.14.5"],"ghsa_id":"GHSA-w56x-9778-rppx","id":"tcs_01M5N9FKZ878P8N2M2QJJ0S0MT","modified_at":"2026-06-22T20:26:28.565023Z","published_at":"2026-06-22T20:09:59Z","references":["https://osv.dev/vulnerability/GHSA-w56x-9778-rppx","https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-w56x-9778-rppx","https://github.com/xwikisas/xwiki-pro-macros"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-w56x-9778-rppx","url":"https://osv.dev/vulnerability/GHSA-w56x-9778-rppx"}],"summary":"xwiki-pro-macros has remote code execution from page title and content via excerpt-include macro"}