CVE-2026-40105— XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-40105
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality
Source: NVD (National Vulnerability Database)
Vulnerability Description
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.0-rc-1, through 17.4.7 and 17.5.0-rc-1 through 17.10.0 contain a reflected cross-site scripting vulnerability (XSS) in the comparison view between revisions of a page allows executing JavaScript code in the user's browser. If the current user is an admin, this can not only affect the current user but also the confidentiality, integrity and availability of the whole XWiki instance. If developers are unable to update immediately, they can apply the patch manually to templates/changesdoc.vm in the deployed WAR.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
XWiki Platform 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
XWiki Platform是XWiki开源的一套用于创建Web协作应用程序的Wiki平台。 XWiki Platform 10.4-rc-1至16.10.15版本、17.0.0-rc-1至17.4.7版本和17.5.0-rc-1至17.10.0版本存在安全漏洞，该漏洞源于页面修订比较视图存在反射型跨站脚本问题，可能导致在用户浏览器中执行JavaScript代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| xwiki | xwiki-platform | >= 10.4-rc-1, < 16.10.16 | - |
II. Public POCs for CVE-2026-40105
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | XWiki is vulnerable to reflected Cross-Site Scripting (XSS) via the `viewer=changes` endpoint. The `rev2` parameter is not properly sanitised before being rendered in the response, allowing an attacker to inject arbitrary JavaScript. Affects XWiki versions prior to the patched release. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40105.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-40105
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: xwiki-platform
- CVE-2026-33229
XWiki Platform affected by remote code execution with script - CVE-2026-26000
XWiki Platform affected by click-jacking through CSS injecti - CVE-2026-24128
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Er - CVE-2025-66473
XWiki's REST APIs don't enforce any limits, leading to unava - CVE-2025-66472
XWiki vulnerable to a reflected XSS via xredirect parameter
Same vendor: xwiki
- CVE-2026-40104
XWiki's REST APIs can list all pages/spaces, leading to unav - CVE-2026-33229
XWiki Platform affected by remote code execution with script - CVE-2026-26000
XWiki Platform affected by click-jacking through CSS injecti - CVE-2026-24128
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Er - CVE-2025-66474
XWiki vulnerable to remote code execution through insufficie
Same weakness: CWE-80
- CVE-2021-47948
WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text - CVE-2026-42030
MapServer: Improper Neutralization of Script-Related HTML Ta - CVE-2026-44264
Weblate is vulnerable to XSS via crafted Markdown - CVE-2026-6002
HTML Injection in DivvyDrive Information Technologies' Divvy - CVE-2025-59854
HCL DFXAnalytics is affected by an Insecure Security Header
V. Comments for CVE-2026-40105
No comments yet