Skip to content
OpenAdvisories

Product · xwiki-contrib

macro-fullcalendar

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-65090

    XWiki Full Calendar Macro vulnerable to data leak through Calendar.JSONService

    XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONService page (including guest users) can exploit the data leak vulnerability by accessing database info, with the …

    xwiki-contrib macro-fullcalendar org.xwiki.contrib:macro-fullcalendar-pom Maven