Xwiki

Xwiki-rendering

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-24128

  • EPSS 0.06%
  • Veröffentlicht 23.01.2026 23:18:31
  • Zuletzt bearbeitet 12.02.2026 16:47:29

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 17.0.0-rc-1 through 17.4.4, and 17.5.0-rc-1 through 17.7.0 contain a reflected Cross-site Scripting (X...

8.8

CVE-2025-66474

Exploit
  • EPSS 1.22%
  • Veröffentlicht 10.12.2025 21:59:58
  • Zuletzt bearbeitet 19.12.2025 17:13:41

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insuffic...

8.8

CVE-2025-53836

Exploit
  • EPSS 2.06%
  • Veröffentlicht 14.07.2025 23:08:34
  • Zuletzt bearbeitet 26.08.2025 17:52:16

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 4.2-milestone-1 and prior to versions 13.10.11, 14.4.7, and 14.10, the default ...

9

CVE-2025-53835

  • EPSS 1.62%
  • Veröffentlicht 14.07.2025 23:00:35
  • Zuletzt bearbeitet 26.08.2025 17:52:40

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 5.4.5 and prior to version 14.10, the XHTML syntax depended on the `xdom+xml/cu...

9.6

CVE-2023-37908

Exploit
  • EPSS 1.46%
  • Veröffentlicht 25.10.2023 18:17:28
  • Zuletzt bearbeitet 21.11.2024 08:12:26

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus...

8.8

CVE-2023-37912

Exploit
  • EPSS 9.89%
  • Veröffentlicht 25.10.2023 18:17:28
  • Zuletzt bearbeitet 21.11.2024 08:12:27

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior to version 14.10.6 of `org.xwiki.platform:xwiki-core-rendering-macro-footnotes` and `org.xwiki.platform:xwiki-rendering-macro-footn...