Product by CryptPad

Xwiki-platform

233 known vulnerabilities in Xwiki-platform (CryptPad), 1 of them actively exploited (CISA KEV).

233

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

119

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Xwiki-platform (CryptPad)

Critical	CVE-2025-24893	Remote code execution as guest via SolrSearchMacros request in xwiki In CISA KEValso in 1 other product	9.8	20.02.2025
Critical	CVE-2025-32429	XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter also in 1 other product	9.8	24.07.2025
Critical	CVE-2025-32969	org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API also in 1 other product	9.8	23.04.2025
Critical	CVE-2024-31984	XWiki Platform: Remote code execution through space title and Solr space facet also in 1 other product	10.0	10.04.2024
Critical	CVE-2024-31465	XWiki Platform: Remote code execution from account via SearchSuggestSourceSheet also in 1 other product	10.0	10.04.2024
Critical	CVE-2024-31997	XWiki Platform remote code execution from account through UIExtension parameters also in 1 other product	10.0	10.04.2024
Critical	CVE-2024-21650	XWiki Remote Code Execution vulnerability via user registration also in 1 other product	10.0	08.01.2024
Critical	CVE-2023-46731	Remote code execution through the section parameter in Administration as guest in XWiki Platform also in 1 other product	10.0	06.11.2023
Critical	CVE-2023-50721	XWiki Platform RCE from account through SearchAdmin also in 1 other product	10.0	15.12.2023
Critical	CVE-2023-37462	CryptPad Xwiki-platform: Eval Injection also in 1 other product	10.0	14.07.2023
Critical	CVE-2024-31982	XWiki Platform: Remote code execution as guest via DatabaseSearch also in 1 other product	10.0	10.04.2024
Critical	CVE-2023-36469	Code injection through NotificationRSSService in XWiki Platform also in 1 other product	10.0	29.06.2023
Critical	CVE-2023-29509	org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability also in 1 other product	10.0	16.04.2023
Critical	CVE-2023-29524	Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform also in 1 other product	10.0	18.04.2023
Critical	CVE-2023-35150	XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application also in 1 other product	9.9	23.06.2023
Critical	CVE-2023-35166	Privilege escalation (PR) from account through TipsPanel also in 1 other product	10.0	20.06.2023
Critical	CVE-2023-26477	org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability also in 1 other product	10.0	02.03.2023
Critical	CVE-2023-26475	XWiki Platform vulnerable to Remote Code Execution in Annotations also in 1 other product	10.0	02.03.2023
Critical	CVE-2023-29516	Code injection from view right on XWiki.AttachmentSelector in xwiki-platform also in 1 other product	9.9	18.04.2023
Critical	CVE-2022-36099	XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability also in 1 other product	9.9	08.09.2022
Critical	CVE-2022-36100	XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection also in 1 other product	9.9	08.09.2022
Critical	CVE-2023-40176	SXSS in the user profile via the timezone displayer also in 1 other product	9.1	23.08.2023
Critical	CVE-2023-32071	XWiki Platform vulnerable to RXSS via editor parameter - importinline template also in 1 other product	9.1	09.05.2023
Critical	CVE-2023-29525	CryptPad Xwiki-platform: Injection also in 1 other product	8.8	19.04.2023
Critical	CVE-2022-36098	XWiki Platform Mentions UI vulnerable to Cross-site Scripting also in 1 other product	8.9	08.09.2022

All vulnerabilities in search

All products by CryptPad

Key figures

Vulnerabilities