cbcvebase.

Kiwitcms Kiwi vulnerabilities

1 known vulnerability affecting kiwitcms/kiwitcms_kiwi.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2022-4105P4MEDIUMCVSS 5.4≥ unspecified, < 11.62022-11-21
CVE-2022-4105 [MEDIUM] CWE-79 CVE-2022-4105: A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML in A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.
ghsanvdosv
Kiwitcms Kiwi vulnerabilities | cvebase