Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 13:52:10 +0000 CVE-2025-65091 — XWiki Full Calendar Macro vulnerable to SQL injection through Calendar.JSONService https://cve.radiocsirt.org/vuln/cve-2025-65091 <p><strong>Affected:</strong> xwiki-contrib macro-fullcalendar</p> <p>XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONService page (including guest users) can exploit a SQL injection vulnerability by accessing database info or starting a DoS attack. This issue has been patched in version 2.4.5.</p> <p><strong>Affected:</strong> xwiki-contrib macro-fullcalendar</p> <p>XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONService page (including guest users) can exploit a SQL injection vulnerability by accessing database info or starting a DoS attack. This issue has been patched in version 2.4.5.</p> https://cve.radiocsirt.org/vuln/cve-2025-65091