XWiki Platform Vulnerability - CSS Injection Risk in Malicious Comments

CVE-2026-26000

What is CVE-2026-26000?

The XWiki Platform, a versatile wiki solution, is susceptible to a CSS injection vulnerability through comments. This flaw, found in versions before 17.9.0, 17.4.6, and 16.10.13, enables attackers to manipulate the platform's CSS. Consequently, this could lead to the entire wiki being transformed into a deceptive link area, potentially redirecting users to harmful external websites. The issue has been rectified in the indicated versions, reinforcing the importance of timely updates and security awareness in web applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References