Lucene search
Veracode Vulnerability DatabaseVERACODE:38176HistoryNov 23, 2022 - 4:57 a.m.
Cross-site Scripting (XSS)
2022-11-2304:57:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
kiwitcms
xss
vulnerability
history.py
remote attacker
malicious javascript
validation
.
0.001 Low
EPSS
Percentile
21.6%
kiwitcms is vulnerable to cross-site scripting. The vulnerability exists in diff_objects function in history.py due to lack of validation of the store values which allows a remote attacker to inject and execute malicious javascript into system.
Related
cvelist
cvelist
CVE-2022-4105 Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi
2022-11-21 00:00:00
prion
prion
Design/Logic Flaw
2022-11-21 20:15:00
cve
cve
CVE-2022-4105
2022-11-21 20:15:11
nvd
nvd
CVE-2022-4105
2022-11-21 20:15:11
osv
osv
Cross-site Scripting in kiwitcms
2022-11-21 21:30:15
CVE-2022-4105
2022-11-21 20:15:11
huntr
huntr
Stored XSS and HTML injection from markdown
2022-11-02 16:43:12
github
github
Cross-site Scripting in kiwitcms
2022-11-21 21:30:15