XW
Product
Xwiki
by Xwiki · last CVE Apr 15, 2026
On CISA KEVExploited in the wild
248
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
VulnerabilityHigh
[CISA KEV] CVE-2025-24893: XWiki Platform - XWiki Platform Eval Injection Vulnerability
XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.
PLPlatformCVE-2025-24893
Oct 30, 2025·CISA KEV