CVE-2016-2138

The CVE-2016-2138 entry concerns kippo-graph prior to version 1.5.1. The vulnerability is a cross-site scripting issue in xss_clean() within class/KippoInput.class.php, as described across multiple connected records (Red Hat, OSV, NVD, and related security trackers). Impact details in the sources...

CVE-2016-2139

CVE-2016-2139 affects kippo-graph prior to version 1.5.1. The vulnerability is a cross-site scripting flaw in the $file_link handling inside KippoInput.class.php. Impact is described as a cross-site scripting vulnerability; no exploitation details are provided beyond the existence of XSS in that ...