MSRXVendors / XWiki
XWiki vulnerabilities being exploited
1 XWiki flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Platform. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2025-10-30 | CVE-2025-24893 Platform XWiki Platform Eval Injection Vulnerability XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch. | 2025-11-20 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.