Vulnerability · Published Dec 5, 2025 · Assigned by GitHub_M
CVE-2025-65036XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro
High 8.3
In plain English
A high-severity missing authorization in xwiki-pro-macros from xwikisas. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.4%top 63.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from the details pages without checking for permissions, which can lead to remote code execution. This vulnerability is fixed in 1.27.1.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| xwikisas | xwiki-pro-macros | < 1.27.1 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L