XW
Product
xwiki-commons
by xwiki · last CVE May 20, 2026
1
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add xwiki-commons to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23734
9.3
19%
May 20
XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slash
Affected: >= 4.2-milestone-2, < 16.10.17; >= 17.0.0-rc-1, < 17.4.9; >= 17.5.0, < 17.10.3; >= 18.0.0-rc-1, < 18.1.0-rc-1
Showing 1