Skip to content

Product

kiwitcms/kiwi vulnerabilities

1 published CVE affecting kiwitcms/kiwi, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest kiwitcms/kiwi CVEs

Newest publication first

  1. CVE-2022-4105 Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi

    Published
    MediumCVSS 5.4 EPSS 0.51%

    A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.