Xwiki

Xwiki-rendering

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2025-53837

  • EPSS 0.64%
  • Veröffentlicht 18.09.2026 15:07:40
  • Zuletzt bearbeitet 24.09.2026 21:25:27

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other d...

6.1

CVE-2026-24128

  • EPSS 0.5%
  • Veröffentlicht 23.01.2026 23:18:31
  • Zuletzt bearbeitet 12.02.2026 16:47:29

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 17.0.0-rc-1 through 17.4.4, and 17.5.0-rc-1 through 17.7.0 contain a reflected Cross-site Scripting (X...

8.8

CVE-2025-66474

Exploit
  • EPSS 1%
  • Veröffentlicht 10.12.2025 21:59:58
  • Zuletzt bearbeitet 25.09.2026 23:10:00

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insuffic...

8.8

CVE-2025-53836

Exploit
  • EPSS 0.54%
  • Veröffentlicht 14.07.2025 23:08:34
  • Zuletzt bearbeitet 26.08.2025 17:52:16

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 4.2-milestone-1 and prior to versions 13.10.11, 14.4.7, and 14.10, the default ...

9

CVE-2025-53835

  • EPSS 0.33%
  • Veröffentlicht 14.07.2025 23:00:35
  • Zuletzt bearbeitet 26.08.2025 17:52:40

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Starting in version 5.4.5 and prior to version 14.10, the XHTML syntax depended on the `xdom+xml/cu...

9.6

CVE-2023-37908

Exploit
  • EPSS 1.06%
  • Veröffentlicht 25.10.2023 18:17:28
  • Zuletzt bearbeitet 21.11.2024 08:12:26

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus...

8.8

CVE-2023-37912

Exploit
  • EPSS 1.25%
  • Veröffentlicht 25.10.2023 18:17:28
  • Zuletzt bearbeitet 21.11.2024 08:12:27

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior to version 14.10.6 of `org.xwiki.platform:xwiki-core-rendering-macro-footnotes` and `org.xwiki.platform:xwiki-rendering-macro-footn...