XWiki Platform: Platform Eval Injection Vulnerability ยท updates https://pwn.watch/i/xwiki-platform-cve-2025-24893 XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch. Added to CISA KEV on 2025-10-30. en Thu, 30 Oct 2025 00:00:00 GMT XWiki Platform: Platform Eval Injection Vulnerability: CISA added CVE-2025-24893 to the KEV catalog (due 2025-11-20). https://pwn.watch/i/xwiki-platform-cve-2025-24893 https://pwn.watch/i/xwiki-platform-cve-2025-24893#2025-10-30-9e90e592 Thu, 30 Oct 2025 00:00:00 GMT critical <p>XWiki Platform: Platform Eval Injection Vulnerability: CISA added CVE-2025-24893 to the KEV catalog (due 2025-11-20).</p>