org.xwiki.contrib.blog:application-blog-ui (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.xwiki.contrib.blog:application-blog-ui, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-66024 — CVSS 9.0 (critical): The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions prior to 9.15.7 are vulnerable to…
• CVE-2025-58365: The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application…