Vendor

xwiki-contrib

17 known vulnerabilities.

Products

Mocca Calendar 3 macro-fullcalendar 2 application-changerequest 2 oidc 2 application-admintools 2 jira 1 syntax-markdown 1 application-blog-ui 1 application-blog 1 macro-plantuml 1 application-ckeditor 1

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 4.4

CVE-2026-42140

Server-Side Request Forgery (SSRF) in PlantUML Macro via 'server' parameter

PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Request Forgery (SSRF). The macro allows users to specify an alternative PlantUML server via the server p…

xwiki-contrib macro-plantuml org.xwiki.contrib.plantuml:macro-plantuml-macro Maven

May 4, 2026
Medium 5.3

CVE-2025-65090

XWiki Full Calendar Macro vulnerable to data leak through Calendar.JSONService

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONService page (including guest users) can exploit the data leak vulnerability by accessing database info, with the …

xwiki-contrib macro-fullcalendar org.xwiki.contrib:macro-fullcalendar-pom Maven

Jan 10, 2026
Medium 6.4

CVE-2025-52131

The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.

xwiki-contrib Mocca Calendar

Aug 3, 2025
Medium 6.4

CVE-2025-52132

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.

xwiki-contrib Mocca Calendar

Aug 3, 2025
Medium 6.4

CVE-2025-52133

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.

xwiki-contrib Mocca Calendar

Aug 3, 2025