CVE-2025-53835 | XWiki xwiki-rendering up to 14.9 XHTML Syntax HTML injection (GHSA-w3wh-g4m9-783p)

July 15, 2025 Yanac

A vulnerability has been found in XWiki xwiki-rendering up to 14.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component XHTML Syntax Handler. The manipulation leads to HTML injection.

This vulnerability is known as CVE-2025-53835. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More