CVE-2026-42140 | Medium | 4.4 | 2026-05-04 | PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes. Prior to version 2.4.1, the PlantUML Macro is vulnerable to Server-Side Reque… |
CVE-2025-66024 | Critical | 9.0 | 2026-03-04 | The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15.7 are vulnerable t… |
CVE-2025-65091 | Critical | 10.0 | 2026-01-10 | XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONService page (i… |
CVE-2025-65090 | Medium | 5.3 | 2026-01-10 | XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONService page (… |
CVE-2025-49594 | | | 2025-10-06 | XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to… |
CVE-2025-58365 | | | 2025-09-08 | The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application in XWiki allowed rem… |
CVE-2025-52133 | Medium | 6.4 | 2025-08-03 | The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import. |
CVE-2025-52132 | Medium | 6.4 | 2025-08-03 | The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page. |
CVE-2025-52131 | Medium | 6.4 | 2025-08-03 | The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field. |
CVE-2025-46558 | Critical | 9.0 | 2025-04-30 | XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to befor… |
CVE-2025-31487 | High | 7.7 | 2025-04-03 | The XWiki JIRA extension provides various integration points between XWiki and JIRA (macros, UI, CKEditor plugin). If the JIRA macro is installed, any logged i… |
CVE-2023-49280 | High | 7.7 | 2023-12-04 | XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the changes. Change request allows to edit any p… |
CVE-2023-48293 | High | 8.8 | 2023-11-20 | The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the… |
CVE-2023-48292 | Critical | 9.6 | 2023-11-20 | The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request… |
CVE-2023-45138 | Critical | 10.0 | 2023-10-12 | Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Starting in version 0.11 and prior to vers… |
CVE-2023-22457 | Critical | 9.0 | 2023-01-04 | CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTMLConverter` document lacked a protection… |
CVE-2022-39387 | Critical | 9.1 | 2022-11-04 | XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Prior to version 1.29.1, even if a wiki has an OpenID provider configured through… |