A vulnerability classified as critical was found in xwiki-contrib application-blog up to 9.13. The affected element is an unknown function. Such manipulation of the argument Content leads to improper neutralization of directives in dynamically evaluated code.
This vulnerability is referenced as CVE-2025-58365. It is possible to launch the attack remotely. No exploit is available.
Upgrading the affected component is advised.
