Skip to content
ThreatCluster

WSO2 Security Advisories: XSS Vulnerabilities Disclosed

First seen 2 Nov 2026, 15:12 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 2, 2026 at 19:47 UTC
  • •Two XSS vulnerabilities disclosed in WSO2 products.
  • •Reflected and stored XSS vulnerabilities could allow script execution.
  • •Immediate action required for community users and support subscription holders.

WSO2 has published two security advisories detailing vulnerabilities in their products. The first advisory (WSO2-2025-4850) describes a reflected Cross-Site Scripting (XSS) vulnerability in the authentication endpoint, which could allow attackers to execute scripts in users' browsers. The second advisory (WSO2-2025-4500) highlights a stored XSS vulnerability that can be exploited by users with the Publisher role through SVG file uploads. Both vulnerabilities affect community users of WSO2's open-source products and require immediate attention. Users are advised to apply the relevant fixes or migrate to unaffected versions. Support subscription holders should update their products to the specified levels to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-30
WSO2-2025-4850 advisory published
WSO2 disclosed a reflected XSS vulnerability in the authentication endpoint affecting community users.
security.docs.wso2.com
2026-11-02
WSO2-2025-4500 advisory published
WSO2 disclosed a stored XSS vulnerability exploitable by users with Publisher role through SVG uploads.
security.docs.wso2.com

More articles in this cluster (2)

Following this threat?

Track WSO2 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

What are the vulnerabilities in WSO2 products?
The vulnerabilities include a reflected XSS in the authentication endpoint and a stored XSS through SVG uploads by users with the Publisher role.
How should I mitigate these vulnerabilities?
Apply the relevant fixes provided by WSO2 or migrate to the latest unaffected versions of the products.
Who is affected by these vulnerabilities?
Both community users of the open-source WSO2 products and support subscription holders are affected.