Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 23:26:49 +0000 CVE-2023-26474 — XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author https://cve.radiocsirt.org/vuln/cve-2023-26474 <p><strong>Affected:</strong> xwiki-platform</p> <p>XWiki Platform is a generic wiki platform. Starting in version 13.10, it&#39;s possible to use the right of an existing document content author to execute a text area property. This has been patched in XWiki 14.10, 14.4.7, and 13.10.11. There are no known workarounds.</p> <p><strong>Affected:</strong> xwiki-platform</p> <p>XWiki Platform is a generic wiki platform. Starting in version 13.10, it&#39;s possible to use the right of an existing document content author to execute a text area property. This has been patched in XWiki 14.10, 14.4.7, and 13.10.11. There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/cve-2023-26474