{"action":"Upgrade org.xwiki.contrib.blog:application-blog-ui to 9.15.7 or later.","affected":[{"fixed":"9.15.7","introduced":"9.15"}],"component":"org.xwiki.contrib.blog:application-blog-ui","cve_ids":["CVE-2025-66024"],"ecosystem":"Maven","epss":0.00388,"exploited":false,"fixed_versions":["9.15.7"],"ghsa_id":"GHSA-h2xq-h7f9-vh6c","id":"tcs_01M5N8ZERTG5N107RP7PKA1WPP","modified_at":"2026-08-05T15:15:43.962556819Z","published_at":"2026-03-04T18:16:14Z","references":["https://osv.dev/vulnerability/GHSA-h2xq-h7f9-vh6c","https://github.com/xwiki-contrib/application-blog/security/advisories/GHSA-h2xq-h7f9-vh6c","https://nvd.nist.gov/vuln/detail/CVE-2025-66024","https://github.com/xwiki-contrib/application-blog/commit/cca87f0a0edc2e7e049d46d51f4a4d8f78b714ba","https://github.com/xwiki-contrib/application-blog/commit/cdcbf2816e9b329e8f006be4391a7ffe80d4bb3f","https://github.com/xwiki-contrib/application-blog","https://jira.xwiki.org/browse/BLOG-245"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-h2xq-h7f9-vh6c","url":"https://osv.dev/vulnerability/GHSA-h2xq-h7f9-vh6c"}],"summary":"XWiki Blog Application home page vulnerable to Stored XSS via Post Title"}