Skip to content
OpenAdvisories
Medium WID-SEC-2026-0412 1 CVE

xwiki: Schwachstelle ermöglicht Darstellen falscher Informationen

Published Feb 12, 2026 · Updated Feb 12, 2026 · de-DE

Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in xwiki ausnutzen, um falsche Informationen darzustellen.

Product

XWiki ist eine Open-Source-Wiki-Software-Plattform, für die Erstellung und Verwaltung von Wikis und Knowledge-Management-Systemen

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-26000

    XWiki Platform affected by click-jacking through CSS injection in comments

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's possible using comments to inject CSS that would transform the full wiki in a link area leading to a malicious…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web Maven

Revision history

  1. #1

    Initiale Fassung

References