xwiki xwiki-rendering vulnerabilities
7 published CVEs name xwiki xwiki-rendering among the affected products.
- 7Published CVEs7 of them scored
- 2Last 12 monthspublished in the last year
- 6Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-53837
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
xwiki · xwiki-rendering
Critical9.9 - CVE-2025-66474
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
xwiki · xwiki-rendering
High8.7 - CVE-2025-53836
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
xwiki · xwiki-rendering
Critical10.0 - CVE-2025-53835
XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
xwiki · xwiki-rendering
Critical9.1 - CVE-2023-37912
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
xwiki · xwiki-rendering
Critical10.0 - CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
xwiki · xwiki-rendering
Critical9.1 - CVE-2023-32070
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
xwiki · xwiki-rendering
Critical9.1