xwiki-platform

3 known vulnerabilities in xwiki-platform, 1 critical, 1 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2025-24893 CVSS 9.8 critical · actively exploited XWiki Platform Eval Injection Vulnerability

Latest vulnerabilities

  • CVE-2026-53966 CVSS 7.1 high XWiki Platform is a generic wiki platform. From 13.4-rc-1 until 16.10.17, 17.4.10, 17.10.4, and 18.1.0-rc-1, the Live Data edit REST API…
  • CVE-2026-34151 CVSS 8.2 high XWiki Platform is a generic wiki platform. Prior to 17.10.5 and 18.2.0, the /skin/ action in com.xpn.xwiki.web.SkinAction can resolve…
  • CVE-2025-24893 CVSS 9.8 critical · actively exploited XWiki Platform Eval Injection Vulnerability