The vulnerability of the HTTP Meta Info field in the administration interface of the XWiki Platform allows a attacker to execute Server Side Template Injection (SSTI) attacks.

The vulnerability of the HTTP Meta Info field in the administration interface of the XWiki Platform involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to execute a Server Side Template Injection SSTI attac...

EUVD-2025-25310

Malicious code in bioql PyPI...

CVE-2025-51990

XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting XSS vulnerabilities in the Administration interface, specifically under the Presentation section of the Global Preferences panel. An authenticated administrator can inject arbitrary JavaScript payloads into the HTTP...