What’s Vulnerable › Products

xwiki-rendering vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your xwiki-rendering version is affected

Latest xwiki-rendering vulnerabilities

• CVE-2025-53837 — org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue (CVSS 9.9)
• CVE-2026-24128 — XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages (CVSS 6.1)
• CVE-2025-66474 — XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection (CVSS 8.8)
• CVE-2023-37912 — XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro (CVSS 8.8)
• CVE-2023-37908 — org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability (CVSS 9.6)