CVE-2020-11057

PoC —

CVSS 3.1

8.8 high

EPSS

2%p81

Published

May 12, 2020 (May 12, 2020)

Modified

Jun 17, 2026

Description

In XWiki Platform 7.2 through 11.10.2, registered users without scripting/programming permissions are able to execute python/groovy scripts while editing personal dashboards. This has been fixed 11.3.7 , 11.10.3 and 12.0.

Vendors: xwiki
Products: xwiki
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.