Xwiki Blog Application — known CVE vulnerabilities

Every CVE whose affected-product data names Xwiki Blog Application, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-66024 — CVSS 9.0 (critical): The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions prior to 9.15.7 are vulnerable to…