Xwiki

Rendering

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2025-53837

  • EPSS 0.64%
  • Veröffentlicht 18.09.2026 15:07:40
  • Zuletzt bearbeitet 24.09.2026 21:25:27

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other d...

8.8

CVE-2025-66474

Exploit
  • EPSS 1%
  • Veröffentlicht 10.12.2025 21:59:58
  • Zuletzt bearbeitet 25.09.2026 23:10:00

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insuffic...

8.8

CVE-2025-53836

Exploit
  • EPSS 0.54%
  • Veröffentlicht 14.07.2025 23:08:34
  • Zuletzt bearbeitet 26.08.2025 17:52:16

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 4.2-milestone-1 and prior to versions 13.10.11, 14.4.7, and 14.10, the default ...

9

CVE-2025-53835

  • EPSS 0.33%
  • Veröffentlicht 14.07.2025 23:00:35
  • Zuletzt bearbeitet 26.08.2025 17:52:40

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 5.4.5 and prior to version 14.10, the XHTML syntax depended on the `xdom+xml/cu...

6.1

CVE-2023-32070

  • EPSS 0.65%
  • Veröffentlicht 10.05.2023 18:15:10
  • Zuletzt bearbeitet 27.01.2025 18:15:35

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki synta...