kiwitcms Latest Vulnerabilities
Latest vulnerabilities published by kiwitcms
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Cross-Site Scripting Vulnerability in Kiwi TCMS Test Management System
CVE-2026-55630KiwitcmsKiwiNONEOpen Source Test Management System Vulnerability in Kiwi TCMS
CVE-2026-54724KiwitcmsKiwi6.1MEDIUMKiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
CVE-2023-36809KiwitcmsKiwi8.1HIGHStored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS
CVE-2023-33977kiwitcmsKiwi👾🟡5.4MEDIUMkiwitcms vulnerable to stored XSS via unrestricted files upload
CVE-2023-32686kiwitcmsKiwi5.4MEDIUMKiwi TCMS has command injection vulnerability in changelog.yml CI workflow
CVE-2023-30628KiwitcmsKiwi8.8HIGHKiwi TCMS may allow user to update email address to unverified one
CVE-2023-30544KiwitcmsKiwi4.3MEDIUMKiwi TCMS unrestricted file upload vulnerability
CVE-2023-30613KiwitcmsKiwi9CRITICALStored cross site scripting via SVG file upload in Kiwi TCMS
CVE-2023-27489KiwitcmsKiwi7.6HIGHKiwi TCMS has no protection against brute-force attacks on login page
CVE-2023-25156KiwitcmsKiwi7.5HIGHKiwi TCMS has denial of service vulnerability on Password reset page
CVE-2023-25171KiwitcmsKiwi7.5HIGHWeak password requirements in Kiwi TCMS
CVE-2023-22451KiwitcmsKiwi6.5MEDIUMCross-site Scripting (XSS) - Stored in kiwitcms/kiwi
CVE-2022-4105KiwitcmsKiwitcms/kiwi7.1HIGH