Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.xwiki.rendering:xwiki-rendering-syntax-xhtml

2 known vulnerabilities (2 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 critical
Registry
Maven Central

Advisories 2

  • CVE-2025-53835Critical 9.1

    XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax

    Affected: from 5.4.5, fixed in 14.10.

  • CVE-2023-32070Critical 9.1

    Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers

    Affected: fixed in 14.6-rc-1.