after\"/}}`. Therefore, this can also be exploited by users without script right and in comments. With the interaction of a user with more rights, this could be used to execute arbitrary actions in the wiki, including privilege escalation, remote code execution, information disclosure, modifying or deleting content. This has been patched in XWiki 14.9, 14.4.6, and 13.10.10.\n","identifier":"CVE-2023-29207","datePublished":"2023-04-15","dateModified":"2025-02-06","url":"https://app.rapidriskradar.com/cve/CVE-2023-29207","publisher":{"@type":"Organization","name":"Rapid Risk Radar"}}
Highest-risk unexploited with PoCs
Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS
Actively Exploited
Confirmed exploited in the wild, sorted by most recently updated
Recently Updated
CVEs with the most recent data changes, published in the last 30 days
