org.xwiki.platform:xwiki-platform-rendering-xwiki

2 results · Feed

• High 8.6
  CVE-2025-49582

  XWiki's required right warnings for macros are incomplete

  XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with fewer rights, XWiki warns about the execution of these macros since XWiki 15.9RC1. These required rights ana…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-security-requiredrights-default org.xwiki.platform:xwiki-platform-rendering-macro-context Maven
  Jun 13, 2025
• Critical 10.0
  CVE-2023-29205

  org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro

  XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systematically perform a proper neutralization of script-related html tags. As a result, any user able to use the html macro in XWiki, is able to i…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-rendering-xwiki Maven
  Apr 15, 2023