CVE-2025-51990

XWiki 17.3.0 and earlier are affected by stored XSS in the Administration interface (Presentation section of Global Preferences). An authenticated administrator can inject JavaScript into the HTTP Meta Info, Footer Copyright, and Footer Version fields; these payloads are stored and rendered witho...