CVE-2019-12930

A cross-site scripting XSS vulnerability in noMenu and noSubMenu in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter...

PT-2019-13030

Name of the Vulnerable Software and Affected Versions WIKINDX versions prior to 5.8.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the method parameter in the noMenu and noSubMenu functions in core/navigation/MENU.php. Recommendations...

CVE-2019-12930: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in noMenu and noSubMenu in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter...