CNNVD-202508-2322 Information

CNNVD ID

CNNVD-202508-2322

CVE-2025-51990

  • CNNVD Published: 2025-08-20

Description (Chinese)

XWiki Platform是XWiki开源的一套用于创建Web协作应用程序的Wiki平台。 XWiki Platform 17.3.0及之前版本存在安全漏洞,该漏洞源于输入中和不当,可能导致存储型跨站脚本攻击。

Description (English)

XWiki Platform is an open source of XWiki ’ s Wiki platform for creating a Web collaborative application. XWiki Platform 17.3 and previous versions had a security loophole, which originated in inappropriate input and could result in a storage-type cross-station script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

XWiki

Published

2025-08-20

Last Modified

2026-02-24

References

https://github.com/malcxlmj/cve-writeups/blob/main/CVE-2025-51990.md https://access.redhat.com/security/cve/cve-2025-51990 https://nvd.nist.gov/vuln/detail/CVE-2025-51990

Patch

https://www.xwiki.org/xwiki/bin/view/Main/WebHome

Share on: