org.xwiki.rendering:xwiki-rendering-syntax-xhtml

2 results · Feed

• Critical 9.1
  CVE-2025-53835

  XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax

  XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 5.4.5 and prior to version 14.10, the XHTML syntax depended on the `xdom+xml/current` sy…

  xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-syntax-xhtml Maven
  Jul 14, 2025
• Critical 9.1
  CVE-2023-32070 Public exploit

  Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers

  XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This h…

  xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-syntax-xhtml org.xwiki.rendering:xwiki-rendering-syntax-html Maven
  May 10, 2023