Skip to content
Xwiki Rendering vulnerabilities
-
xwiki xwiki-rendering
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
CVE-2025-53837
Fix available
9.9 Critical
-
xwiki, xwiki xwiki-platform, xwiki-rendering +2 more
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
CVE-2026-24128
Fix available
6.5 Medium
-
xwiki xwiki-rendering
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
CVE-2025-66474
Fix available
8.7 High
-
xwiki, xwiki xwiki-rendering +1 more
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
CVE-2025-53836
Fix available
10.0 Critical
-
xwiki, xwiki xwiki-rendering +1 more
XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
CVE-2025-53835
Fix available
9.1 Critical
-
xwiki xwiki-rendering
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
CVE-2023-37912
Fix available
10.0 Critical
-
xwiki xwiki-rendering
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
CVE-2023-37908
Public exploitFix available
9.1 Critical
-
xwiki rendering, xwiki, xwiki xwiki-rendering +2 more
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
CVE-2023-32070
Public exploitFix available
9.1 Critical