{“lastseen”:”2025-08-18T21:27:29″,”description”:”# XWiki Rendering\\n\\n[XWiki Rendering](http:\/\/rendering.xwiki.org\/xwiki\/bin\/view\/Main\/) is a generic Rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).\\n\\nXWiki Platform, XWiki Commons and XWiki Rendering are part of the [XWiki.org](http:\/\/www.xwiki.org\/) software forge. They are released together and share the same version.\\n\\n## Documentation\\n* [Documentation](http:\/\/rendering.xwiki.org\/xwiki\/bin\/view\/Main\/)\\n* [API](http:\/\/platform.xwiki.org\/xwiki\/bin\/view\/DevGuide\/API)\\n* [Development Zone](http:\/\/dev.xwiki.org\/xwiki\/bin\/view\/Community\/)\\n\\n## Download\\nThe XWiki Rendering JARs are available in the [](http:\/\/search.maven.org\/#search|ga|1|g%3A%22org.xwiki.rendering%22).\\n\\n## Release Notes\\nRead our [Release Notes](http:\/\/www.xwiki.org\/xwiki\/bin\/view\/ReleaseNotes\/).\\n\\n## Tools\\n* [Continuous Integration](http:\/\/ci.xwiki.org\/) setup launches a build for each commit\\n* [Issue Tracker](http:\/\/jira.xwiki.org\/browse\/XRENDERING) if you want to report an issue\\n* [Development Flow](http:\/\/dev.xwiki.org\/xwiki\/bin\/view\/Community\/DevelopmentPractices#HGeneralDevelopmentFlow) to see the full list of tools we use to build XWiki\\n* [](https:\/\/ge.xwiki.org\/scans)\\n\\n## Project Statistics\\n\\n\\n\\nNote that we’re [using an issue tracker](http:\/\/jira.xwiki.org\/browse\/XRENDERING) other than GitHub Issues (hence the empty left column in the stats).\\n\\nSee the [Project Health page](https:\/\/dev.xwiki.org\/xwiki\/bin\/view\/Community\/ProjectHealth) for more statistics about the XWiki project.\\n\\n## Community\\n\\nWe’re always looking for contributors!\\n\\nYou should read our [Get Involved Guide](https:\/\/dev.xwiki.org\/xwiki\/bin\/view\/Community\/Contributing) or get in touch:\\n* [Forum](https:\/\/dev.xwiki.org\/xwiki\/bin\/view\/Community\/Discuss)\\n* [Chat](https:\/\/dev.xwiki.org\/xwiki\/bin\/view\/Community\/Chat)\\n\\nYou can follow the XWiki news in [our blog](https:\/\/www.xwiki.org\/xwiki\/bin\/view\/Blog\/).\\n\\nThank you to all contributors:\\n\\n\\n \\n\\n\\n”,”published”:”2025-08-16T14:34:03″,”modified”:”2025-08-16T14:35:29″,”type”:”githubexploit”,”title”:”Exploit for Cross-site Scripting in Xwiki Xwiki-Rendering”,”source”:””,”references”:””,”id”:”1F444329-FF5F-578D-A932-7280A406CCA5″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2023-37908″],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:9.6,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/github.com\/shoucheng3\/xwiki__xwiki-rendering_CVE-2023-37908_14-10-3″,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-08-18T21:27:29″,”description”:”# XWiki Rendering\\n\\n[XWiki Rendering](http:\/\/rendering.xwiki.org\/xwiki\/bin\/view\/Main\/) is a generic Rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML,…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[9,6,8,62,12,32,13,7,11,5],"class_list":["post-13380","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-critical","tag-cve","tag-cvss","tag-cvss-96","tag-exploit","tag-githubexploit","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n