Xwiki

Pro Macros

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2025-55730

  • EPSS 0.37%
  • Published 09.09.2025 18:53:53
  • Last modified 11.09.2025 17:14:25

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execu...

10

CVE-2025-55729

  • EPSS 0.37%
  • Published 09.09.2025 18:51:47
  • Last modified 11.09.2025 17:14:25

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in the ConfluenceLayoutSection macro allows remote code e...

9.8

CVE-2025-55728

  • EPSS 9.23%
  • Published 09.09.2025 18:40:51
  • Last modified 17.09.2025 19:45:32

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes parameter in the panel macro allows remote code execution...

9.8

CVE-2025-55727

Exploit
  • EPSS 8.72%
  • Published 09.09.2025 18:31:08
  • Last modified 17.09.2025 19:46:54

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution ...

8.8

CVE-2024-42489

  • EPSS 38.86%
  • Published 12.08.2024 16:15:16
  • Last modified 16.09.2024 19:46:18

Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit or comment right on any page to perform remote code execution. Other macros like Viewppt ar...