Xwiki

Pro Macros

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2025-55730

  • EPSS 0.37%
  • Veröffentlicht 09.09.2025 18:53:53
  • Zuletzt bearbeitet 11.09.2025 17:14:25

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execu...

10

CVE-2025-55729

  • EPSS 0.37%
  • Veröffentlicht 09.09.2025 18:51:47
  • Zuletzt bearbeitet 11.09.2025 17:14:25

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in the ConfluenceLayoutSection macro allows remote code e...

9.8

CVE-2025-55728

  • EPSS 9.23%
  • Veröffentlicht 09.09.2025 18:40:51
  • Zuletzt bearbeitet 17.09.2025 19:45:32

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes parameter in the panel macro allows remote code execution...

9.8

CVE-2025-55727

Exploit
  • EPSS 8.72%
  • Veröffentlicht 09.09.2025 18:31:08
  • Zuletzt bearbeitet 17.09.2025 19:46:54

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution ...

8.8

CVE-2024-42489

  • EPSS 38.86%
  • Veröffentlicht 12.08.2024 16:15:16
  • Zuletzt bearbeitet 16.09.2024 19:46:18

Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit or comment right on any page to perform remote code execution. Other macros like Viewppt ar...