CVE-2023-33977

CVE-2023-33977 Stored XSS Via SVG Upload in kiwitcms/kiwi - by M Nadeem Qazi Description This repository addresses the stored XSS vulnerability discovered in the kiwitcms/kiwi application, which was assigned the CVE-2023-33977 identifier. The vulnerability allows for the execution of malicious...

django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15307 via django (2.1.5)

django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-15307 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

familiar (0.1.4), kiwitcms (>=8.1.0, <=8.1.99) potentially affected by CVE-2026-15307 via django (3.0.4)

django PYPI version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - familiar 0.1.4 - kiwitcms =8.1.0, =8.1.99 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-avishan (>=0.2.42, <=0.3.23), django-nameko-standalone (2.0.1) +6 more potentially affected by CVE-2026-15307 via django (3.0.7)

django PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-avishan =0.2.42, =0.5.6, =1.7.4, =1.8.0a1 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

edc (>=0.1.47, <=0.1.72), kiwitcms (8.6.0) +3 more potentially affected by CVE-2026-15307 via django (3.0.9)

django PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.1.47, =0.0.1, =0.0.3 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-15307 via django (4.0.4)

django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

djangodjangodjango (4.1.8), kiwitcms (12.2.0) potentially affected by CVE-2026-15307 via django (4.1.8)

django PYPI version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.8 - kiwitcms 12.2.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15830 via django (2.1.5)

django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

alcali (>=2018.3.1, <=2019.2.1.post0), kiwitcms (7.0.0) +10 more potentially affected by CVE-2026-15830 via django (2.2.5)

django PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.1, =0.31.14, =0.8.0, =0.3.1, =0.0.1, =0.0.1, =0.0.1, =0.0.5 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

djangodjangodjango (4.1.5), haupt (>=0.0.1, <=0.0.2) +4 more potentially affected by CVE-2026-15830 via django (4.1.5)

django PYPI version 4.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.5 - haupt =0.0.1, =0.13.0, =0.4.0, =0.4.1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

django-bloggy (1.0.0), kiwitcms (10.5.0) +2 more potentially affected by CVE-2026-15830 via django (3.2.9)

django PYPI version 3.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-bloggy 1.0.0 - kiwitcms 10.5.0 - mercarigetter =1.0.14, =1.0.0, =1.1.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

djangodjangodjango (4.1.8), kiwitcms (12.2.0) potentially affected by CVE-2026-15830 via django (4.1.8)

django PYPI version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangodjangodjango 4.1.8 - kiwitcms 12.2.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

autoreduce-frontend (>=22.0.0.dev22, <=22.0.0.dev23), django-rq-scheduler (2022.5.1) +4 more potentially affected by CVE-2026-15830 via django (4.0.4)

django PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - autoreduce-frontend =22.0.0.dev22, =0.0.17, =0.7.15, =0.7.23 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

kiwitcms (10.1.0), nobinobi-core (0.1.4.1) +5 more potentially affected by CVE-2026-15830 via django (3.2.3)

django PYPI version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - kiwitcms 10.1.0 - nobinobi-core 0.1.4.1 - nobinobi-staff 0.1.6.1 - xdj-datamap =0.0.1, =0.0.1, =0.0.3, =0.0.1, =0.0.6 Source cves: CVE-2026-15830...

archivebox (>=0.5.0, <=0.5.4), ashley (1.0.0b3) +7 more potentially affected by CVE-2026-15830 via django (3.1.3)

django PYPI version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - archivebox =0.5.0, =1.0.0, =1.0.0, =2.0.0a1, =2.1.1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

edc (>=0.1.47, <=0.1.72), kiwitcms (8.6.0) +3 more potentially affected by CVE-2026-15830 via django (3.0.9)

django PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - edc =0.1.47, =0.0.1, =0.0.3 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

django-avishan (>=0.2.42, <=0.3.23), django-nameko-standalone (2.0.1) +6 more potentially affected by CVE-2026-15830 via django (3.0.7)

django PYPI version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-avishan =0.2.42, =0.5.6, =1.7.4, =1.8.0a1 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15307 via django (2.1.5)

django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

django-magnificent-messages (>=0.1.2, <=0.1.4), fiduswriter (3.7.0rc4) +5 more potentially affected by CVE-2026-15307 via django (2.2.4)

django PYPI version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-magnificent-messages =0.1.2, =0.0.0, =0.9.6, =0.9.16, =0.9.17 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...