CVE-2019-13588

CVE-2019-13588 affects WIKINDX prior to 5.8.2. The vulnerability is in getPagingStart() (core/lists/PAGING.php) and allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter, i.e., a cross-site scripting (XSS) issue. Documents consistently describe an attacker e...

CVE-2019-12930

WIKINDX is affected by a cross-site scripting (XSS) vulnerability in core/navigation/MENU.php (noMenu() and noSubMenu()) prior to version 5.8.1. The issue stems from inadequate validation of client-side data via the method parameter, enabling remote attackers to inject arbitrary web script or HTM...

CVE-2021-3340

The CVE-2021-3340 entry describes a cross-site scripting (XSS) vulnerability in Wikindx before 5.7.0 and in the 6.x series up to 6.4.0, allowing remote attackers to inject arbitrary script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php. The provi...

CVE-2019-9961

The vulnerability CVE-2019-9961 affects Wikindx prior to version 5.7.0, specifically an XSS flaw in the ressource view (core/modules/resource/RESOURCEVIEW.php) that allows an attacker to inject arbitrary script/HTML through the id parameter. Impact is limited to client-side script execution per t...