XWiki Platform vulnerable to code injection from account/view through VFS Tree macro
Maven org.xwiki.platform:xwiki-platform-vfs-ui · Upgrade to 14.10.2, 14.4.8 or 13.10.11 by release line · >= 7.4-milestone-2, < 13.10.11; >= 14.0-rc-1, < 14.4.8; >= 14.5, < 14.10.2 · CVE-2023-29521 · GHSA-p67q-h88v-5jgr