Kiwix

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kiwix records in CISA KEV

No Kiwix vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Libkiwix · all components

TI-2022-10791 CVE-2022-27920 · GHSA-f9mc-pgcm-862f

LOW 29

libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0089 Published 2022-03-25 No fix listed CWE-79