Maven/org.xwiki.contrib.blog:application-blog-ui CVE-2025-66024: critical 9, EPSS 0.39%
XWiki Blog Application home page vulnerable to Stored XSS via Post Title
Action: Upgrade org.xwiki.contrib.blog:application-blog-ui to 9.15.7 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.15 | 9.15.7 | - |
Fixed versions
| 9.15.7 |
Sources
- osv: GHSA-h2xq-h7f9-vh6c
- https://github.com/xwiki-contrib/application-blog/security/advisories/GHSA-h2xq-h7f9-vh6c
- https://nvd.nist.gov/vuln/detail/CVE-2025-66024
- https://github.com/xwiki-contrib/application-blog/commit/cca87f0a0edc2e7e049d46d51f4a4d8f78b714ba
- https://github.com/xwiki-contrib/application-blog/commit/cdcbf2816e9b329e8f006be4391a7ffe80d4bb3f
- https://github.com/xwiki-contrib/application-blog
- https://jira.xwiki.org/browse/BLOG-245
CVE-2025-66024 · published · modified · JSON