TI-2015-00934 CVE-2015-1032 · GHSA-jrf3-5554-9xcfCross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve…Priority LOW 24Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01892 · Published 2015-01-21 · No fix listed CWE-79