Xwiki-rendering

This hub aggregates every CVE we track for Xwiki-rendering, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Xwiki-rendering.

• CVE-2026-24128XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages6.1Jan 23, 2026
• CVE-2025-66474XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection8.8Dec 10, 2025
• CVE-2025-53836XWiki Rendering is vulnerable to RCE attacks when processing nested macros9.9Jul 14, 2025
• CVE-2025-53835XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax9.0Jul 14, 2025
• CVE-2023-37912XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro9.9Oct 25, 2023
• CVE-2023-37908org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability9.0Oct 25, 2023
• CVE-2023-32070Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers9.0May 10, 2023