Vulnerabilidades en xwiki
250 resultadosCVE-2025-46557HIGHAny user with view access to the XWiki space can change the authenticatorEPSS 0.6%CVE-2025-29926HIGHThe WikiManager REST API allows any user to create wikisEPSS 0.6%CVE-2023-29515HIGHCross-site scripting (XSS) in xwiki-platformEPSS 0.6%CVE-2022-41932HIGHCreation of new database tables through login form on PostgreSQLEPSS 0.6%CVE-2023-26056MEDIUMXWiki Platform allows macro execution as any user without programming rights through the context macroEPSS 0.6%CVE-2023-34466MEDIUMXWiki Platform's tags on non-viewable pages can be revealed to usersEPSS 0.6%CVE-2026-24128MEDIUMXWiki Affected by Reflected Cross-Site Scripting (XSS) in Error MessagesEPSS 0.6%CVE-2026-33229HIGHXWiki Platform affected by remote code execution with script right through unprotected Velocity scripting APIEPSS 0.5%CVE-2024-46979MEDIUMData leak of notification filters of users in XWiki PlatformEPSS 0.5%CVE-2026-40105MEDIUMXWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionalityEPSS 0.5%CVE-2024-31986CRITICALXWiki Platform CSRF remote code execution through scheduler job's document referenceEPSS 0.5%CVE-2023-41046MEDIUMVelocity execution without script rights in Xwiki platformEPSS 0.5%CVE-2023-29520MEDIUMPage render failure due to broken translations in xwiki-platformEPSS 0.5%CVE-2025-32972LOWThe lesscss script service allows cache clearing without programming rightEPSS 0.5%CVE-2024-46978MEDIUMMissing checks for notification filter preferences editions in XWiki PlatformEPSS 0.5%CVE-2022-41933MEDIUMPlaintext storage of password in org.xwiki.platform:xwiki-platform-security-authentication-defaultEPSS 0.5%CVE-2025-54124HIGHXWiki Platform: Any user with editing rights can access password properties through Database List PropertiesEPSS 0.5%CVE-2024-56158CRITICALXWiki allows SQL injection in query endpoint of REST API with OracleEPSS 0.5%CVE-2024-21648HIGHXWiki has no right protection on rollback actionEPSS 0.5%CVE-2025-66472MEDIUMXWiki vulnerable to a reflected XSS via xredirect parameter in DeleteApplicationEPSS 0.5%