Product
CVE-2025-32429 is a critical blind SQL injection vulnerability in the XWiki LiveData REST API allowing unauthenticated attackers to extract database contents via the sort parameter in getdeleteddocuments.vm.