org.xwiki.rendering:xwiki-rendering-macro-html (5.2-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (5.2-milestone-1) +7 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.2-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2-milestone-1 -...

Contrib’s Syntax Markdown Extension XSS

The vulnerability in Contrib’s Syntax Markdown extension for the XWiki Platform lies in the lack of protection for the structure of web pages when processing the width parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

org.xwiki.rendering:xwiki-rendering-macro-html (5.2-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (5.2-milestone-2) +7 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.2-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.2-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.2-milestone-2 -...

CVE-2025-46558

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...

CVE-2025-46558 org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...

CVE-2025-46558

The CVE-2025-46558 issue affects XWiki Contrib's Syntax Markdown (org.xwiki.contrib.markdown:syntax-markdown-commonmark12). A cross-site scripting (XSS) vulnerability exists in Markdown syntax versions 8.2 through before 8.9 via HTML, allowing any user to embed JavaScript that executes in other u...

CVE-2025-46558

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...

CVE-2025-46558 org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...

CVE-2025-46558: Improper Neutralization of Input During Web Page Generation

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2 to before 8.9, the Markdown syntax is vulnerable to cross-site scripting XSS through HTML. In particular, using Markdown syntax, it's possible for...

org.xwiki.rendering:xwiki-rendering-macro-html (4.2), org.xwiki.rendering:xwiki-rendering-syntax-html (4.2) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.2)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (4.2-milestone-3), org.xwiki.rendering:xwiki-rendering-syntax-html (4.2-milestone-3) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.2-milestone-3)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.2-milestone-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html...

org.xwiki.rendering:xwiki-rendering-macro-html (4.5), org.xwiki.rendering:xwiki-rendering-standalone (4.5) +3 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.5)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (4.4), org.xwiki.rendering:xwiki-rendering-standalone (4.4) +2 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.4)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (4.5-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (4.5-rc-1) +3 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.5-rc-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.5-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.5-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (4.3-rc-1), org.xwiki.rendering:xwiki-rendering-syntax-html (4.3-rc-1) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.3-rc-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (4.1.3), org.xwiki.rendering:xwiki-rendering-syntax-html (4.1.3) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.1.3)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.1.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (4.3-milestone-1), org.xwiki.rendering:xwiki-rendering-syntax-html (4.3-milestone-1) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.3-milestone-1)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.3-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html...

org.xwiki.rendering:xwiki-rendering-macro-html (4.1.2), org.xwiki.rendering:xwiki-rendering-syntax-html (4.1.2) +1 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.1.2)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.1.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.0), org.xwiki.rendering:xwiki-rendering-standalone (5.0) +3 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (5.0)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.0 -...

org.xwiki.rendering:xwiki-rendering-macro-html (4.5.2), org.xwiki.rendering:xwiki-rendering-standalone (4.5.2) +3 more potentially affected by CVE-2023-32070 +1 more via org.xwiki.rendering:xwiki-rendering-syntax-xhtml (4.5.2)

org.xwiki.rendering:xwiki-rendering-syntax-xhtml MAVEN version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-syntax-xhtml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 4.5.2 -...