Lucene search
+L
KiwixLibkiwix

1 matches found

CVE
CVE
added 2022/03/25 8:00 p.m.88 views

CVE-2022-27920

The CVE-2022-27920 entry affects libkiwix (versions 10.0.0 and 10.0.1) with an XSS flaw in the built‑in webserver through the search suggestions URL parameter. The root cause involves improper handling of that URL parameter, enabling cross-site scripting. The vulnerability is fixed in version 10....

6.1CVSS5.8AI score0.0089EPSS
Save