CVE-2026-85271

Open edX Platform (versions from Redwood until Ulmo and Verawood.1) contains a stored CSS injection vulnerability in email digest notifications. The add_additional_attributes_to_notifications function in openedx/core/djangoapps/notifications/email/utils.py fails to sanitize discussion-title value...

CVE-2026-77607

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, sep was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue...

SUSE CVE-2026-93383

Information leak in Permissions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-93385

Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the DebugFormatter process. An attacker can execute arbitrary scripts in the context of the user's browser by crafting a malicious query that injects unescaped HTML or JavaScript into the debug output. This ...

CVE-2026-77607 Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, sep was inserted verbatim into HTML cell joins. This made it possible to inject HTML through the separator value. Version 7.2.0 fixes the issue...

CVE-2025-53837

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

EUVD-2025-210935

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...

CVE-2025-53837

XWiki Rendering (org.xwiki.rendering:xwiki-rendering-xml) is affected by an Eval Injection flaw prior to versions 14.10.2 and 15.0 RC1 . Rendering output is included as content of HTML macros without further escaping, allowing an attacker who can edit a document (e.g., their own profile) to close...

org.xwiki.rendering:xwiki-rendering-macro-html (6.3), org.xwiki.rendering:xwiki-rendering-standalone (6.3) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (>=14.0-rc-1, <=14.10.1), org.xwiki.rendering:xwiki-rendering-standalone (>=14.0-rc-1, <=14.10.1) +15 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (>=14.0-rc-1, <=14.10.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.6-rc-1, =14.0-rc-1, =14.0-rc-1, =14.6-rc-1, =14.6-rc-1, =14.0-rc-1, =14.0-rc-1, =14.0-rc-1, =14.1-rc-1, =14.6-rc-1, =14.6-rc-1, =14.10.1 and more Source cves:...

org.xwiki.rendering:xwiki-rendering-macro-html (6.1-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (6.1-milestone-2) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.1-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.1-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.1-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.10.6), org.xwiki.rendering:xwiki-rendering-standalone (11.10.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.10.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.10.6 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.7), org.xwiki.rendering:xwiki-rendering-standalone (13.7) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.7 -...

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

org.xwiki.rendering:xwiki-rendering-macro-html (12.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (12.3-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.2.4), org.xwiki.rendering:xwiki-rendering-standalone (6.2.4) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (6.2.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.2.4 -...