CVE-2023-35166: XWiki

High severity, CVSS 8.8. EPSS: 62.2% chance of exploitation in the next 30 days.

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 and 14.10.5.

Affected products

• XWiki XWiki: from 8.1, before 14.10.5 (fixed in 14.10.5)

Published 2023-06-20. Last modified 2026-06-17.