Exploit for Code Injection in Xwiki

CVE-2025-24893 XWiki Unauthenticated Remote code execution POC...

The vulnerability of the SolrSearchMacros component of the XWiki Platform, a platform for creating collaborative web applications. This allows a hacker to execute arbitrary code.

The vulnerability of the SolrSearchMacros component in the XWiki Platform for creating collaborative web applications stems from the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

XWiki.org XWiki SolrSearchMacros text Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of XWiki.org XWiki. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the text parameter provided to the SolrSearchMacros endpoint. The issue...