CVE-2025-49583

CVE-2025-49583 describes a low-severity vulnerability in XWiki where a low-privileged user can craft a document containing malicious email templates. If an administrator subsequently edits and saves this document, the crafted templates could be used to send spam or phishing links to other users, potentially hiding other attack notifications. The vulnerability has a CVSS score of 3.5 (LOW) due to its network attack vector, low attack complexity, and limited impact (information disclosure). There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.