VDB

CVE-2025-53835

CVE-2025-53835 PUBLISHED CVSS 9.100000381469727 CRITICAL

XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax

EPSS 3.85% · 88.4th percentile

Risk Scores

CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS Score
3.85%
88.4th percentile

Affected Products

VendorProductVersions
Mavenorg.xwiki.rendering:xwiki-rendering-syntax-xhtml5.4.5
xwikixwiki5.4.5
xwikixwiki-rendering>= 5.4.5, < 14.10

Timeline

  • Jan 21, 1970 Security Advisory
  • Jul 14, 2025 CVE Published
  • Jul 15, 2025 CVE Updated
  • Jul 15, 2025 EPSS Score
  • Jul 15, 2025 Coalition ESS Score
  • Jul 15, 2025 Coalition ESS Score
  • Jul 16, 2025 Coalition ESS Score
  • Jul 24, 2025 EPSS Score
  • Aug 3, 2025 EPSS Score
  • Aug 12, 2025 EPSS Score
  • Aug 21, 2025 EPSS Score
  • Aug 22, 2025 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›