Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Xwiki-contrib
Application-blog
Xwiki-contrib Application-blog vulnerabilities
xwiki
blog application
,
xwiki-contrib
application-blog-ui
+1 more
XWiki Blog Application home page vulnerable to Stored XSS via Post Title
CVE-2025-66024
Public exploit
Fix available
8.6
High
March 4, 2026
xwiki-contrib
application-blog
XWiki Blog Application: Privilege Escalation (PR) from account through blog content
CVE-2025-58365
Fix available
8.7
High
September 8, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open