Product by Open Source

    Xwiki

    5 known vulnerabilities in Xwiki (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Xwiki (Open Source)
    CriticalCVE-2025-53837

    org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

    also in 1 other product

    		9.9
    HighCVE-2026-48048

    XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

    also in 1 other product

    		7.5
    HighCVE-2026-34151

    XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+

    also in 1 other product

    		—
    HighCVE-2026-53966

    XWiki Platform: Privilege escalation from edit to script right through Live Data editing

    also in 1 other product

    		—
    MediumCVE-2026-48047

    CryptPad Xwiki-platform: Path Traversal: '../filedir'

    also in 1 other product

    		—

    All products by Open Source