{"action":"Upgrade org.xwiki.contrib.blog:application-blog-ui to 9.14 or later.","affected":[{"fixed":"9.14","introduced":"0"}],"component":"org.xwiki.contrib.blog:application-blog-ui","cve_ids":["CVE-2025-58365"],"ecosystem":"Maven","epss":0.00584,"exploited":false,"fixed_versions":["9.14"],"ghsa_id":"GHSA-gwj6-xpfg-pxwr","id":"tcs_01M5N8Z3R5PZYDKGPFJ4PB9NBG","modified_at":"2025-09-10T21:05:21Z","published_at":"2025-09-08T20:59:47Z","references":["https://osv.dev/vulnerability/GHSA-gwj6-xpfg-pxwr","https://github.com/xwiki-contrib/application-blog/security/advisories/GHSA-gwj6-xpfg-pxwr","https://nvd.nist.gov/vuln/detail/CVE-2025-58365","https://github.com/xwiki-contrib/application-blog/commit/b98ab6f17da3029576f42d12b4442cd555c7e0b4","https://github.com/xwiki-contrib/application-blog","https://jira.xwiki.org/browse/BLOG-191"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-gwj6-xpfg-pxwr","url":"https://osv.dev/vulnerability/GHSA-gwj6-xpfg-pxwr"},{"source":"nvd","source_id":"CVE-2025-58365","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58365"}],"summary":"XWiki Blog Application: Privilege Escalation (PR) from account through blog content"}