Product by CryptPad

    XWiki Rendering

    8 known vulnerabilities in XWiki Rendering (CryptPad), 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in XWiki Rendering (CryptPad)
    CriticalCVE-2025-53837

    org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

    also in 1 other product

    		9.9
    CriticalCVE-2023-37912

    XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro

    		10.0
    HighCVE-2025-66474

    XWiki Rendering: Eval Injection

    		8.8
    CriticalCVE-2023-37908

    XWiki Rendering: Improper Neutralization of Script in Attributes in a Web Page

    		9.1
    CriticalCVE-2025-53836

    XWiki Rendering is vulnerable to RCE attacks when processing nested macros

    also in 1 other product

    		10.0
    CriticalCVE-2025-53835

    XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax

    also in 1 other product

    		9.1
    MediumCVE-2026-24128

    XWiki Affected by Reflected Cross-Site Scripting (XSS) in Error Messages

    also in 2 other products

    		6.1
    CriticalCVE-2023-32070

    Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers

    also in 1 other product

    		6.1

    All products by CryptPad