CVE-2026-40105

XWiki Platform has a reflected XSS in the page revisions comparison view. Affected versions: 10.4-rc-1 through 16.10.15, 17.0.0-rc-1 through 17.4.7, and 17.5.0-rc-1 through 17.10.0. The vulnerability allows executing JavaScript in the attacker’s or user’s browser when viewing the comparison betwe...