CVE-2025-32974

Summary

CVE-2025-32974 is a vulnerability affecting XWiki, a widely-used generic wiki platform. In versions ranging from 15.9-rc-1 to 15.10.7 and 16.0.0-rc-1 to 16.2.0, the platform fails to perform adequate rights analysis for TextAreas with default content types. Malicious scripts can be inserted into certain properties that go unnoticed during editing. Users with script, admin, or programming rights can execute these scripts, leading to potential impacts on the confidentiality, integrity, and availability of the entire XWiki installation. This vulnerability has been addressed in versions 15.10.8 and 16.2.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.