Skip to content
OpenAdvisories

Product · xwiki

xwiki-rendering

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-66474

    XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

    XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient prot…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven