XWiki

Records305All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical143CVSS 9.0–10.0

CVSS high84CVSS 7.0–8.9

Exploited now

XWiki records in CISA KEV

TI-2025-18595 XWiki Platform Eval Injection Vulnerability CRITICAL 100KEV 2025-10-30

Components

Products in the NVD configurations · select one to filter the records

Xwiki 248 records CRITICAL Cryptpad 5 records HIGH Pro Macros 5 records HIGH Commons 4 records HIGH Xwiki-rendering 4 records HIGH Pdf Viewer Macro 3 records HIGH Change Request 2 records HIGH Ckeditor Integration 2 records HIGH

Records

4 records in Xwiki-rendering · all components

TI-2023-19345 CVE-2023-37912 · GHSA-35j5-m29r-xfq5

XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

HIGH 76

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.01452 Published 2023-10-25 Fixed in 14.10.6, 15.1-rc-1 CWE-270

TI-2023-19341 CVE-2023-37908 · GHSA-663w-2xp3-5739

Cross-site scripting in xwiki-rendering

HIGH 76

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01112 Published 2023-10-25 Fixed in 14.10.4 CWE-83

TI-2025-40901 CVE-2025-66474 · GHSA-9xc6-c2rm-f27p

XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

HIGH 73

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01021 Published 2025-12-10 Fixed in 16.10.10, 17.4.3 +1 CWE-95

TI-2026-19446 CVE-2026-24128 · GHSA-wvqx-m5px-6cmp

XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages

LOW 30

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.

CVSS 4.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00551 Published 2026-01-23 Fixed in 16.10.12, 17.4.5 +1 CWE-79

Open these records in search →