Skip to content
OpenAdvisories

Package · Maven

org.xwiki.rendering:xwiki-rendering-xml

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2025-53837

    org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

    XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document c…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven
  • Critical 9.1
    CVE-2023-37908 Public exploit

    org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

    XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-si…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven