Login Request a demo
XW
Product
xwiki-rendering
by xwiki · last CVE Sep 18, 2026
7
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 3High 3Medium 1Low 0
Severity
All severities7Critical3High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add xwiki-rendering to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66474
8.8
1%
Dec 10
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
Affected: < 16.10.10; >= 17.0.0-rc-1, < 17.4.3; >= 17.5.0-rc-1, < 17.6.0-rc-1
CVE-2025-53836
8.8
1%
Jul 14
XWiki Rendering is vulnerable to RCE attacks when processing nested macros
Affected: >= 4.2-milestone-1, < 13.10.11; >= 14.0, < 14.4.7; >= 14.5, < 14.10
CVE-2023-37912
8.8
1%
Oct 25
XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax
Affected: before 14.10.6; 15.0
Showing 3