CVE-2025-55730

CRITICAL

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the...

Affects 0 products across 1 vendor.

CVSS 3.110.0
EPSS0.7%
Percentile54th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-116: CWE-116
Related Attack Patterns (CAPEC)
CAPEC-81 Web Server Logs Tampering
via CWE-116
CAPEC-85 AJAX Footprinting
via CWE-116
CAPEC-73 User-Controlled Filename
via CWE-116
CAPEC-104 Cross Zone Scripting
via CWE-116

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

CVE-2025-55730 affects XWiki Remote Macros versions 1.0 to 1.26.4, allowing remote code execution due to a lack of escaping in the title parameter of the confluence paste code macro.

BSID: BS-2025-GLOBAL-297338-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-55730?
CVE-2025-55730 affects XWiki Remote Macros versions 1.0 to 1.26.4, allowing remote code execution due to a lack of escaping in the title parameter of the confluence paste code macro.
What is the CVSS score for CVE-2025-55730?
CVE-2025-55730 has CVSS 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS: 0.7%.
Is CVE-2025-55730 actively exploited?
No confirmed active exploitation of CVE-2025-55730 as of 2026-10-23.
How do I remediate CVE-2025-55730?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-55730?
CVE-2025-55730 affects Xwiki.
Vulnerability Details
CVE IDCVE-2025-55730
BSIDBS-2025-GLOBAL-297338-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Published2025-09-09
Last Modified2026-10-18
ICS Relevance0%
Weakness (CWE)
CWE-116
SourceNVD
Official Description

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execution for any user who can edit any page. The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by injecting malicious XWiki syntax into the title parameter of the confluence paste code macro, leading to remote code execution on the server.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Xwiki — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 408 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashf3a7630bb013517c98c031f96fe1efd7d6b999399c6843ff38d5532c9b75b266f3bbd24de6cf6e686eaede0d53ac5b7dbccfe26002834310a3541affe575e03d
Related CVEs affecting Xwiki
CVE-2025-65091 10.0 XWiki Full Calendar Macro displays objects from the wiki on the calendar. Pri... CVE-2025-55729 10.0 XWiki Remote Macros provides XWiki rendering macros that are useful when migr... CVE-2023-27479 9.9 XWiki Platform is a generic wiki platform offering runtime services for appli... CVE-2023-26055 9.9 XWiki Commons are technical libraries common to several other top level XWiki... CVE-2023-26477 9.8 XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and ...
View all Xwiki CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →