org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent (5.0-milestone-2), org.xwiki.rendering:xwiki-rendering-test (5.0-milestone-2) potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.0-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.0-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-syntax-xdomxmlcurrent 5.0-milestone...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (11.3-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (12.1), org.xwiki.rendering:xwiki-rendering-standalone (12.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (12.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.1-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (9.1-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.1-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.1-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.1-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.2-milestone-1), org.xwiki.rendering:xwiki-rendering-standalone (8.2-milestone-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (8.2-milestone-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.2-milestone-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.2-milestone-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (10.8.1), org.xwiki.rendering:xwiki-rendering-standalone (10.8.1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (10.8.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 10.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 10.8.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4), org.xwiki.rendering:xwiki-rendering-standalone (5.4) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (5.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.4-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (7.4-rc-1) +11 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (7.4-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.4-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.4-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (8.4-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (8.4-rc-1) +9 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (8.4-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 8.4-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 8.4-rc-1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.3.3), org.xwiki.rendering:xwiki-rendering-standalone (11.3.3) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (11.3.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.3.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (9.3-rc-1), org.xwiki.rendering:xwiki-rendering-standalone (9.3-rc-1) +8 more potentially affected by CVE-2025-53837 via org.xwiki.rendering:xwiki-rendering-xml (9.3-rc-1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 9.3-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 9.3-rc-1 -...

Remote Code Execution (RCE)

org.xwiki.rendering:xwiki-rendering-xml is vulnerable to Remote Code Execution RCE. The vulnerability is due to insufficient protection against /html injection, which allows an attacker to inject and execute arbitrary script macros leading to code execution and unauthorized data access...

org.xwiki.rendering:xwiki-rendering-macro-html (17.5.0), org.xwiki.rendering:xwiki-rendering-standalone (17.5.0) +15 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (17.5.0)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 17.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 17.5.0 -...

org.xwiki.rendering:xwiki-rendering-macro-html (>=5.2-milestone-1, <=16.10.9), org.xwiki.rendering:xwiki-rendering-standalone (>=5.2-milestone-1, <=16.10.9) +19 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (>=5.0-milestone-1, <=16.10.9)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version =5.0-milestone-1, =5.2-milestone-1, =5.2-milestone-1, =6.4-milestone-3, =5.2-milestone-1, =5.4.5, =14.6-rc-1, =5.2-milestone-1, =6.4-milestone-3, =14.6-rc-1, =5.2-milestone-1, =5.2-rc-1, =5.2-rc-1, =14.6-rc-1, =5.2-milestone-1, =5.0-milestone...

org.xwiki.rendering:xwiki-rendering-macro-html (>=17.0.0-rc-1, <=17.4.2), org.xwiki.rendering:xwiki-rendering-standalone (>=17.0.0-rc-1, <=17.4.2) +15 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (>=17.0.0-rc-1, <=17.4.2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.0.0-rc-1, =17.4.2 and more...

org.xwiki.rendering:xwiki-rendering-macro-html (12.7.1), org.xwiki.rendering:xwiki-rendering-standalone (12.7.1) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (12.7.1)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 12.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 12.7.1 -...

org.xwiki.rendering:xwiki-rendering-macro-html (7.1-milestone-2), org.xwiki.rendering:xwiki-rendering-standalone (7.1-milestone-2) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (7.1-milestone-2)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 7.1-milestone-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 7.1-milestone-2 -...

org.xwiki.rendering:xwiki-rendering-macro-html (6.4), org.xwiki.rendering:xwiki-rendering-standalone (6.4) +11 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (6.4)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 6.4 -...

org.xwiki.rendering:xwiki-rendering-macro-html (5.4.3), org.xwiki.rendering:xwiki-rendering-standalone (5.4.3) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (5.4.3)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 5.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 5.4.3 -...

org.xwiki.rendering:xwiki-rendering-macro-html (11.10.5), org.xwiki.rendering:xwiki-rendering-standalone (11.10.5) +8 more potentially affected by CVE-2025-66474 via org.xwiki.rendering:xwiki-rendering-xml (11.10.5)

org.xwiki.rendering:xwiki-rendering-xml MAVEN version 11.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.xwiki.rendering:xwiki-rendering-xml and may be impacted: - org.xwiki.rendering:xwiki-rendering-macro-html 11.10.5 -...