VendorsXWikixwiki-renderingall versions
Vulnerabilities

XWiki Xwiki-rendering 15.0 Release Candidate 1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-37912
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
Published 2023-10-25 · Modified
9.9EPSS 0.012
CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
Published 2023-10-25 · Modified
9.6EPSS 0.011
CVE-2025-66474
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
Published 2025-12-10 · Analyzed
8.8EPSS 0.010
CVE-2026-24128
XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages
Published 2026-01-23 · Analyzed
6.5EPSS 0.006