xwiki xwiki-rendering vulnerabilities
7 published CVEs name xwiki xwiki-rendering among the affected products.
- Published CVEs
- 7
- Last 12 months
- 2
- Critical
- 6
- Known exploited
- 0
Critical 6High 1Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20233
- 20253
- 20261
Newest CVEs
- CVE-2025-53837
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
xwiki · xwiki-rendering
Critical9.9 - CVE-2025-66474
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
xwiki · xwiki-rendering
High8.7 - CVE-2025-53836
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
xwiki · xwiki-rendering
Critical10.0 - CVE-2025-53835
XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
xwiki · xwiki-rendering
Critical9.1 - CVE-2023-37912
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
xwiki · xwiki-rendering
Critical10.0 - CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
xwiki · xwiki-rendering
Critical9.1 - CVE-2023-32070
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
xwiki · xwiki-rendering
Critical9.1