← Back

Xwiki

xwiki

282 CVEs • 19 products

Products (19)

Click to collapse
Toggle
Xwiki
xwiki
248 CVEs
Cryptpad
cryptpad
5 CVEs
Pro Macros
pro_macros
5 CVEs
Commons
commons
4 CVEs
Xwiki Rendering
xwiki-rendering
4 CVEs
Pdf Viewer Macro
pdf_viewer_macro
3 CVEs
Ckeditor Integration
ckeditor_integration
2 CVEs
Change Request
change_request
2 CVEs
Full Calendar Macro
full_calendar_macro
2 CVEs
Xwiki Watch
xwiki_watch
1 CVE
Xwiki Enterprise
xwiki_enterprise
1 CVE
Openid Connect
openid_connect
1 CVE
Rendering
rendering
1 CVE
Oauth Identity
oauth_identity
1 CVE
Application Collabora
application-collabora
1 CVE
Admin Tools
admin_tools
1 CVE
Application Licensing
application_licensing
1 CVE
Confluence Migrator
confluence_migrator
1 CVE
Blog Application
blog_application
1 CVE

CVEs (282)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-7223
1Xwiki
1Xwiki
Apr 23, 2026
Sep 14, 2007
N/A· v4
N/A· v3
6.5 MEDIUM· v2
PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitr...Show more
PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose author has programming rights, modifying this document to contain a script, and previewing without saving the document.Show less
CVE-2005-4862
1Xwiki
1Xwiki
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.