← Back to home
wid-sec-w-2026-0600  ·  Published 2026-03-04  ·  View on BSI CERT-Bund ↗

xwiki Blog Application: Vulnerability allows Cross-Site Scripting

CVSS 8.6 HIGH

Risk Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in der xwiki Blog Application ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

CVEs (1)

Affected Vendors

Open Source

Affected Products (2)

Open Source · xwiki <9.15.7
Open Source · xwiki 9.15.7

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more