Vulnerabilities

TI-2026-19446 CVE-2026-24128 · GHSA-wvqx-m5px-6cmp

XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages

LOW 30

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.

CVSS 4.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00551 Published 2026-01-23 Fixed in 16.10.12, 17.4.5 +1 CWE-79

TI-2025-40901 CVE-2025-66474 · GHSA-9xc6-c2rm-f27p

XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

HIGH 73

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01021 Published 2025-12-10 Fixed in 16.10.10, 17.4.3 +1 CWE-95

TI-2023-19345 CVE-2023-37912 · GHSA-35j5-m29r-xfq5

XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

HIGH 76

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.01452 Published 2023-10-25 Fixed in 14.10.6, 15.1-rc-1 CWE-270

TI-2023-19341 CVE-2023-37908 · GHSA-663w-2xp3-5739

Cross-site scripting in xwiki-rendering