xwiki/xwiki-rendering Security Advisories | GitStock

critical2026-09-18

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

GHSA-26vp-8gxg-v4pg · CVE-2025-53837

high2025-12-10

XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

GHSA-9xc6-c2rm-f27p · CVE-2025-66474

critical2025-07-14

XWiki Rendering is vulnerable to RCE attacks when processing nested macros

GHSA-32mf-57h2-64x9 · CVE-2025-53836

critical2025-07-14

XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax

GHSA-w3wh-g4m9-783p · CVE-2025-53835

high2023-10-25

XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

GHSA-35j5-m29r-xfq5 · CVE-2023-37912

critical2023-10-25

org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

GHSA-663w-2xp3-5739 · CVE-2023-37908

critical2023-05-11

Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers

GHSA-6gf5-c898-7rxp · CVE-2023-32070