PT-2026-24758

Impact An attacker can upload a file with a file extension or content type that is not blocked by the default configuration of the Parse Server fileUpload.fileExtensions option. The file can contain malicious code, for example JavaScript in an SVG or XHTML file. When the file is accessed via its...

CVE-2020-37103: Improper Neutralization of Input During Web Page Generation

DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools. Attackers can upload XML files with XHTML namespace scripts to execute arbitrary JavaScript in users' browsers, potentially...

CVE-2022-37307

OX App Suite through 7.10.6 allows XSS via XHTML CDATA for a snippet, as demonstrated by the onerror attribute of an IMG element within an e-mail signature...

[SECURITY] Fedora 42 Update: roundcubemail-1.6.12-1.fc42

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

org.xwiki.rendering:xwiki-rendering-macro-html (9.11.5), org.xwiki.rendering:xwiki-rendering-standalone (9.11.5) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (9.11.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.11.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (13.5-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (13.5-rc-1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (13.5-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 13.5-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 13.5-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.8-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (10.8-rc-1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (10.8-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.8-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.8-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (15.1-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (15.1-rc-1) +15 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (15.1-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 15.1-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 15.1-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.1-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (8.1-rc-1) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (8.1-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.1-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.1-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.4-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (7.4-rc-1) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (7.4-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.4-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.4-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (14.1-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (14.1-rc-1) +9 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (14.1-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 14.1-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 14.1-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.11.2), org.xwiki.rendering:xwiki-rendering-standalone (10.11.2) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (10.11.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.11.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.4.2), org.xwiki.rendering:xwiki-rendering-standalone (8.4.2) +9 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (8.4.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.4.2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (14.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (14.3-rc-1) +9 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (14.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 14.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 14.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (14.4.5), org.xwiki.rendering:xwiki-rendering-standalone (14.4.5) +9 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (14.4.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 14.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 14.4.5 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.11.7), org.xwiki.rendering:xwiki-rendering-standalone (9.11.7) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (9.11.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.11.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.11.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.6.1), org.xwiki.rendering:xwiki-rendering-standalone (12.6.1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (12.6.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.6.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4.7), org.xwiki.rendering:xwiki-rendering-standalone (5.4.7) +9 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.4.7)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4.7 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.3-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (5.3-milestone-1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.3-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.3-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.3-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.2), org.xwiki.rendering:xwiki-rendering-standalone (7.2) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (7.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.2 -...