Xwiki

XWiki is an open-source wiki and collaboration platform whose vulnerability footprint, despite a focused product portfolio, ranks among the most represented in the landscape, reflecting the platform's deep embeddedness in internal knowledge-management and documentation infrastructure. Vulnerabilities affecting the vendor skew strongly toward serious outcomes and frequently acquire public exploit code, driven by the platform's dynamic content-generation model and server-side code execution capabilities. The exposure recurs persistently across XWiki's core product, rendering libraries, and macro subsystems through interconnected weakness classes centered on improper neutralization of user input in dynamically evaluated contexts—cross-site scripting, code injection, eval injection, and missing authorization—that are structural to a wiki platform where users can contribute template-driven content with embedded expressions. Defenders should treat XWiki disclosures as high-priority for any internal wiki deployment and inventory instances that expose the platform to untrusted user submission; live severity, exploit availability, and exploitation activity are shown alongside this summary.