Maven org.xwiki.platform:xwiki-platform-web-templates

Name: Maven org.xwiki.platform:xwiki-platform-web-templates
Brand: Maven

productUS

pkg:maven/org.xwiki.platform/xwiki-platform-web-templates

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

3critical5high15medium0low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-41947US	medium5.4	1.67% (77th)	Exploit	15.10.8	2024-07-31	2 versions
CVE-2023-40176US	medium5.4	80.0% (100th)	—	14.10.5	2023-08-23	4.1-milestone-2 → 14.10.5
CVE-2023-45136US	critical9.6	5.38% (93rd)	—	14.10.12	2023-10-25	2 versions
CVE-2022-24819US	medium5.3	3.20% (88th)	—	13.9	2022-04-08	3 versions
CVE-2023-35160US	medium6.1	2.27% (83rd)	—	15.1-rc-1	2023-06-23	2 versions
CVE-2023-35159US	medium6.1	2.18% (82nd)	—	14.10.5	2023-06-23	2 versions
CVE-2023-45134US	critical9.0	2.02% (81st)	—	15.5-rc-1	2023-10-25	2 versions
CVE-2023-45135US	high8.0	1.91% (80th)	—	15.5-rc-1	2023-10-25	2 versions
CVE-2023-29207US	critical9.0	1.39% (72nd)	—	14.9	2023-04-15	3 versions
CVE-2023-29512US	high8.8	1.14% (67th)	—	14.10.1	2023-04-19	3 versions
CVE-2022-23622US	medium6.1	1.01% (63rd)	—	13.10.3	2022-02-09	3 versions
CVE-2022-36093US	high7.1OT elevated	0.88% (59th)	—	14.3-rc-1	2022-09-08	2 versions
CVE-2022-36091US	high7.5OT elevated	0.83% (57th)	—	13.10.4	2022-09-08	1.3 → 13.10.4
CVE-2023-45137US	medium5.4	0.75% (55th)	—	14.10.12	2023-10-25	2 versions
CVE-2023-34464US	medium5.4	0.71% (53rd)	—	15.1-rc-1	2023-06-23	3 versions
CVE-2023-29203US	medium5.3	0.70% (53rd)	—	14.4.3	2023-04-15	3 versions
CVE-2025-32430US	medium6.1	0.69% (53rd)	—	16.10.6	2025-08-06	3 versions
CVE-2024-43401US	high8.0OT elevated	0.68% (52nd)	—	15.10-rc-1	2024-08-19	< 15.10-rc-1
CVE-2023-29513US	medium4.3	0.67% (52nd)	—	14.10.1	2023-04-19	8.0-rc-1 → 14.10.1
CVE-2026-24128US	medium6.1	0.55% (46th)	—	16.10.12	2026-01-24	3 versions
CVE-2026-40105US	medium6.1	0.55% (46th)	—	17.10.1	2026-04-15	3 versions
CVE-2025-66472US	medium6.1	0.51% (43rd)	—	16.10.10	2025-12-10	2 versions
CVE-2022-36095US	medium4.3	0.42% (36th)	—	14.3	2022-09-08	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')13 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4 CVEs
CWE-359Exposure of Private Personal Information to an Unauthorized Actor3 CVEs
CWE-862Missing Authorization2 CVEs
CWE-87Improper Neutralization of Alternate XSS Syntax2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-284Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan