kiwitcms Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by kiwitcms
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
CVE-2023-36809KiwitcmsKiwi8.1HIGHKiwi TCMS has command injection vulnerability in changelog.yml CI workflow
CVE-2023-30628KiwitcmsKiwi8.8HIGHKiwi TCMS unrestricted file upload vulnerability
CVE-2023-30613KiwitcmsKiwi9CRITICALStored cross site scripting via SVG file upload in Kiwi TCMS
CVE-2023-27489KiwitcmsKiwi7.6HIGHKiwi TCMS has no protection against brute-force attacks on login page
CVE-2023-25156KiwitcmsKiwi7.5HIGHKiwi TCMS has denial of service vulnerability on Password reset page
CVE-2023-25171KiwitcmsKiwi7.5HIGHCross-site Scripting (XSS) - Stored in kiwitcms/kiwi
CVE-2022-4105KiwitcmsKiwitcms/kiwi7.1HIGH