CMS

XWikiplatform

XWiki is a free and Open source wiki software platform written in Java with a design emphasis on extensibility. XWiki is an enterprise wiki. It includes WYSIWYG editing OpenDocument-based document import/export annotations and tagging and advanced permissions management.

Official Site:

https://xwiki.com/

Severity Summary:

Critical: 24 High: 102 Medium: 86 Low: 4

Reference

Title

Severity

CVE-2023-31126

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2022-36094

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2023-29202

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2023-29201

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2023-29207

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2023-45134

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2023-45136

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2023-26477

XWiki Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2024-31982

XWikiplatform Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2023-37277

XWiki Cross-Site Request Forgery (CSRF) Vulnerability

Critical

CVE-2025-24893

XWikiplatform Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2023-27479

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability

Critical

CVE-2024-55663

XWikiplatform Improper Encoding or Escaping of Output Vulnerability

Critical

CVE-2023-46731

XWiki Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2025-32969

XWikiplatform Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Critical

CVE-2022-29161

XWiki Inadequate Encryption Strength Vulnerability

Critical

CVE-2022-36098

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2025-32974

XWikiplatform Improper Encoding or Escaping of Output Vulnerability

Critical

CVE-2023-32071

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2022-36096

XWiki Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Critical

CVE-2024-21650

XWiki Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2025-32973

XWikiplatform Missing Authorization Vulnerability

Critical

CVE-2025-29926

XWikiplatform Missing Authorization Vulnerability

Critical

CVE-2024-31996

XWikiplatform Improper Control of Generation of Code (Code Injection) Vulnerability

Critical

CVE-2023-29517

XWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

High

CVE-2024-43401

XWiki Missing Authorization Vulnerability

High

CVE-2023-29507

XWiki Other Vulnerability

High

CVE-2023-32069

XWiki Incorrect Authorization Vulnerability

High

CVE-2023-29511

XWiki Improper Neutralization of Directives in Dynamically Evaluated Code (Eval Injection) Vulnerability

High

CVE-2023-30537

XWiki Improper Control of Generation of Code (Code Injection) Vulnerability

High