GHSA-GFP2-6QHM-7X43 The WikiManager REST API allows any user to create wikis

Impact Any user can exploit the WikiManager REST API to create a new wiki, where the user could become an administrator and so performs other attacks on the farm. Note that this REST API is not bundled in XWiki Standard by default: it needs to be installed manually through the extension manager...

PT-2025-11972

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 15.10.15 XWiki Platform versions prior to 16.4.6 XWiki Platform versions prior to 16.10.0 Description The issue allows any user to exploit the WikiManager REST API to create a new wiki, potentially becoming an...