Junglewise Threat Intelligence

CVE-2025-58365: XWiki Blog Application: Privilege Escalation (PR) from account through blog content

CVE-2025-58365 · Severity: medium · CVSS 4 · Published 2025-09-08

Vendors: Maven.

Executive brief

XWiki Blog Application: Privilege Escalation (PR) from account through blog content

Affected products

Maven org.xwiki.contrib.blog:application-blog-ui

Related threats

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions starting with 9.15 and prior to 9.15