{"action":"Upgrade org.xwiki.rendering:xwiki-rendering-syntax-xhtml to 14.10 or later.","affected":[{"fixed":"14.10","introduced":"5.4.5"}],"component":"org.xwiki.rendering:xwiki-rendering-syntax-xhtml","cve_ids":["CVE-2025-53835"],"ecosystem":"Maven","epss":0.00408,"exploited":false,"fixed_versions":["14.10"],"ghsa_id":"GHSA-w3wh-g4m9-783p","id":"tcs_01M5N9FDNHCNWGAT7N6231BRDM","modified_at":"2026-09-10T03:50:26.354193801Z","published_at":"2025-07-14T21:40:21Z","references":["https://osv.dev/vulnerability/GHSA-w3wh-g4m9-783p","https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-w3wh-g4m9-783p","https://nvd.nist.gov/vuln/detail/CVE-2025-53835","https://github.com/xwiki/xwiki-rendering/commit/a4ca31f99f524b9456c64150d6f375984aa81ea7","https://github.com/xwiki/xwiki-rendering","https://jira.xwiki.org/browse/XRENDERING-660"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-w3wh-g4m9-783p","url":"https://osv.dev/vulnerability/GHSA-w3wh-g4m9-783p"}],"summary":"XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax"}