Skip to content
OpenAdvisories

Package · Maven

org.xwiki.rendering:xwiki-rendering-xml

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.9
    CVE-2025-53837

    org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

    XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document c…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven
  • High 8.7
    CVE-2025-66474

    XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

    XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient prot…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven
  • Critical 9.1
    CVE-2023-37908 Public exploit

    org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

    XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-si…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven