Vendor

xwiki-contrib

17 known vulnerabilities.

Products

Mocca Calendar 3 macro-fullcalendar 2 application-changerequest 2 oidc 2 application-admintools 2 jira 1 syntax-markdown 1 application-blog-ui 1 application-blog 1 macro-plantuml 1 application-ckeditor 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.6

CVE-2025-66024 Public exploit

XWiki Blog Application home page vulnerable to Stored XSS via Post Title

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15.7 are vulnerable to Stored Cross-Site Scripting (XSS) via the Blog Post Title. The vulnerability arises because the po…

xwiki-contrib application-blog-ui org.xwiki.contrib.blog:application-blog-ui Maven

Mar 4, 2026
Critical 9.7

CVE-2023-48292 Public exploit EPSS 23%

XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request forgery vulnerability in the admin tool for executing shell commands on the server allows an attacke…

xwiki-contrib application-admintools org.xwiki.contrib:xwiki-application-admintools Maven

Nov 20, 2023