Actively exploited vulnerabilities affecting XWiki products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-24893https://wildfortech.com/security#CVE-2025-24893This vulnerability in XWiki Platform allows completely unauthenticated visitors — including anonymous internet users — to inject and execute arbitrary code on the server by crafting a malicious request to the SolrSearch endpoint. Because no login is required, the attack surface is wide open to anyone who can reach the instance. Successful exploitation gives an attacker remote code execution, meaning full control over the underlying server and any data it holds.Thu, 30 Oct 2025 00:00:00 GMTXWikiPlatform