Ghostwire

CVE-2026-53966: XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data...

HIGH CVSS 0.0 Exploit Available

Published: August 19, 2026 | Last Modified: August 19, 2026

Description

XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing

Ghostwire Analysis — What This Means Practically

Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

github.com/xwiki/xwiki-platform/security/advisories/GHSA-45ph-gxxr-gwgw
github.com/xwiki/xwiki-platform/commit/448b0f074cc6711410eb2647c4740454c92d1626
jira.xwiki.org/browse/XWIKI-23986
github.com/advisories/GHSA-45ph-gxxr-gwgw
www.tenable.com/cve/CVE-2026-53966
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-53966