Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Wikindx Project Component: Wikindx Clear all filters
TI-2021-02339 CVE-2021-3340 · GHSA-hhm3-x3q6-2xcg

A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x…

Priority LOW 29

A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogo…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00801 Published 2021-02-01 No fix listed CWE-79
TI-2019-09680 CVE-2019-12930 · GHSA-pg5q-54x8-f6r3

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in…

Priority LOW 30

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01141 Published 2019-07-08 No fix listed CWE-79
TI-2019-07327 CVE-2019-9961 · GHSA-v4vc-fh6j-92wx

A cross-site scripting (XSS) vulnerability in ressource view in…

Priority LOW 29

A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00809 Published 2019-03-26 No fix listed CWE-79