CVE-2025-55727

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution for any user who can edit any page or who can access the CKEditor converter. The width parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution when the macro has been installed by a user with programming right, or it at least allows executing Velocity code as the wiki admin. Version 1.26.5 contains a patch for the issue.

• CWE-95
• CWE-94

• https://github.com/xwikisas/xwiki-pro-macros/blob/aed17fa3db4081846dbb6bdf76ba10cf44401c44/xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/Column.xml#L438Product
• https://github.com/xwikisas/xwiki-pro-macros/commit/05651adb4b58d03ba862d5290c645feeffd2121bPatch
• https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-hxqp-983c-m8h9Exploit, Vendor Advisory
• https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-hxqp-983c-m8h9Exploit, Vendor Advisory

Published

Sep 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55721Rejected reason: Not used
• CVE-2025-55722Rejected reason: Not used
• CVE-2025-55723Rejected reason: Not used
• CVE-2025-55724Rejected reason: Not used
• CVE-2025-55725Rejected reason: Not used
• CVE-2025-55726Rejected reason: Not used
• CVE-2025-55728XWiki Remote Macros provides XWiki rendering macros that are…9.8
• CVE-2025-55729XWiki Remote Macros provides XWiki rendering macros that are…10
• CVE-2025-5573A vulnerability was found in D-Link DCS-932L 2.18.01. It has…9.8
• CVE-2025-55730XWiki Remote Macros provides XWiki rendering macros that are…10
• CVE-2025-55731Frappe is a full-stack web application framework. A carefull…8.8
• CVE-2025-55732Frappe is a full-stack web application framework. Prior to 1…7.5