application-blog vulnerabilities
1 known vulnerability in application-blog from Xwiki-contrib. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest first
- 8.7 High severity
application-blog: Improper Neutralization of Directives in Dynamically Evaluated Code
The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application in XWiki allowed remote code execution for any user who has edit right on any page. Normally, these are all logged-in use