PT-2019-19959

Name of the Vulnerable Software and Affected Versions Wikindx versions prior to 5.7.0 Description A cross-site scripting issue exists in the resource view of Wikindx, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the id parameter in the RESOURCEVIEW.php fi...

CVE-2019-9961: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...