Vendor
Xwikisas
19 known vulnerabilities in products by Xwikisas, 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-44179 | XWiki Pro Macros: excerpt-include title and content injection executes code | 9.9 | |
| Critical | CVE-2025-55727 | XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro | 10.0 | |
| Critical | CVE-2023-45144 | Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App | 10.0 | |
| Critical | CVE-2024-42489 | Pro Macros Remote Code Execution via Viewpdf and similar macros | 10.0 | |
| Critical | CVE-2025-55728 | XWiki Remote Macros vulnerable to remote code execution using the panel macro | 10.0 | |
| Critical | CVE-2025-55730 | XWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro | 10.0 | |
| Critical | CVE-2025-55729 | XWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macro | 10.0 | |
| Critical | CVE-2025-27603 | XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations | 9.1 | |
| High | CVE-2024-52298 | macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author | 7.5 | |
| Critical | CVE-2024-52300 | macro-pdfviewer has a XSS through the width parameter | 9.1 | |
| High | CVE-2025-65036 | XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro | 8.3 | |
| High | CVE-2024-30263 | The PDF Viewer macro can be used to view PDF attachments with restricted access | 7.7 | |
| High | CVE-2024-52299 | The PDF viewer macro allows accessing any attachment without access right checks | 7.5 | |
| High | CVE-2023-46743 | The same file cannot be opened with different rights | 7.4 | |
| High | CVE-2025-27604 | XWiki Confluence Migrator Pro's homepage is public | 7.5 | |
| Medium | CVE-2025-65089 | XWiki view file macro: User can view content of office file without view rights on the attachment | 6.8 | |
| Medium | CVE-2024-26138 | License information is public, exposing instance id and license holder details | 5.3 | |
| Medium | CVE-2025-54990 | XWiki AdminTools application doesn't set permissions on the AdminTools space | 5.3 | |
| Medium | CVE-2025-48885 | application-urlshortener users can create arbitrary pages as long as they have view access to them | — |
Products
| Xwiki-pro-macros | 8 | 0 |
| Macro-pdfviewer | 4 | 0 |