org.xwiki.rendering:xwiki-rendering-macro-html (11.2), org.xwiki.rendering:xwiki-rendering-standalone (11.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.2-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (11.2-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.2-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.2-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.2-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.1), org.xwiki.rendering:xwiki-rendering-standalone (12.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.7), org.xwiki.rendering:xwiki-rendering-standalone (9.7) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.8-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (9.8-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.8-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.8-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.8-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.7), org.xwiki.rendering:xwiki-rendering-standalone (13.7) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (13.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.7-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (11.7-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.7-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.7-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.7-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.6), org.xwiki.rendering:xwiki-rendering-standalone (11.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.6 -...

GHSA-26VP-8GXG-V4PG org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

org.xwiki.rendering:xwiki-rendering-macro-html (11.8-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (11.8-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.8-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.8-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.8-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (5.3-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.7-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (9.7-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.7-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.7-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.7-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.6), org.xwiki.rendering:xwiki-rendering-standalone (12.6) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.6)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.6 -...

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Impact Any user who can edit their own user profile or any other document can execute arbitrary script macros including Groovy and Python macros that allow remote code execution including unrestricted read and write access to all wiki contents. The reason is that rendering output is included as...

org.xwiki.rendering:xwiki-rendering-macro-html (11.10.2), org.xwiki.rendering:xwiki-rendering-standalone (11.10.2) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.10.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.10.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.1-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (7.1-rc-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.1-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.1-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.1-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.8.1), org.xwiki.rendering:xwiki-rendering-standalone (11.8.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.8.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.8.1 -...

CVE-2026-85122

The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to store arbitrary content which is then rendered unescaped in an admin page, leading to Stored XSS...

EUVD-2026-82665

The Easy Form Builder by WhiteStudio WordPress plugin before 4.2.0 does not validate a submitted value against the stored configuration for some of its form types, allowing unauthenticated users to store arbitrary content which is then rendered unescaped in an admin page, leading to Stored XSS...

CVE-2026-79294: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component...