Skip to content
OpenAdvisories

Vendor

xwiki-contrib

17 known vulnerabilities.

Products

Mocca Calendar 3 macro-fullcalendar 2 application-changerequest 2 oidc 2 application-admintools 2 jira 1 syntax-markdown 1 application-blog-ui 1 application-blog 1 macro-plantuml 1 application-ckeditor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-66024 Public exploit

    XWiki Blog Application home page vulnerable to Stored XSS via Post Title

    The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15.7 are vulnerable to Stored Cross-Site Scripting (XSS) via the Blog Post Title. The vulnerability arises because the po…

    xwiki-contrib application-blog-ui org.xwiki.contrib.blog:application-blog-ui Maven