Skip to content
OpenAdvisories

Package · Maven

org.xwiki.platform:xwiki-platform-web-templates

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-40105 Scanner template

    XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.0-rc-1, through 17.4.7 and 17.5.0-rc-1 through 17.10.0 contain a reflected cross-site scripting vulnerability (…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Medium 6.5
    CVE-2026-24128 Scanner template

    XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 17.0.0-rc-1 through 17.4.4, and 17.5.0-rc-1 through 17.7.0 contain a reflected Cross-site Scripting (XSS) vulne…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Medium 6.5
    CVE-2025-66472 Scanner template

    XWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplication

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates ar…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates org.xwiki.platform:xwiki-platform-flamingo-skin-resources Maven
  • Medium 6.5
    CVE-2025-32430 Scanner template

    XWiki Platform contains Reflected XSS vulnerability in two templates

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilitie…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Medium 5.0
    CVE-2023-29513

    Users can be created even when registration is disabled without validation via the template macro in xwiki-platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. If guest has view right on any document. It's possible to create a new user using the `distribution/firstadminuser.wiki` in the wrong context. This vulner…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Medium 4.3
    CVE-2022-36095

    XWiki Cross-Site Request Forgery (CSRF) for actions on tags

    XWiki Platform is a generic wiki platform. Prior to versions 13.10.5 and 14.3, it is possible to perform a Cross-Site Request Forgery (CSRF) attack for adding or removing tags on XWiki pages. The problem has been patched in XWiki 13.10.5 and 14.3. As a workar…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Medium 5.3
    CVE-2022-24819 Scanner template

    Unauthenticated user can retrieve the list of users through uorgsuggest.vm

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents related to users of the wiki. The problem has been patched in XWiki vers…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven