XW
Product
xwiki-rendering
by xwiki · last CVE Sep 18, 2026
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 2Low 0
Watch

Add xwiki-rendering to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53837
9.9
2%
Sep 18
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
Affected: < 14.10.2
CVE-2023-37908
9.6
1%
Oct 25
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
Affected: >= 14.6-rc-1, < 14.10.4
CVE-2025-53835
9.0
0%
Jul 14
XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
Affected: >= 5.4.5, < 14.10
Showing 3