kiwitcms vulnerabilities (PyPI)
13 vulnerabilities.
-
kiwitcmsPyPI Kiwi TCMS: Stored XSS via javascript: URI in extra_link field (TestPlan & TestCase) 0.0 None -
kiwitcmsPyPI Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpoint 6.1 Medium -
kiwitcmsPyPI Kiwi TCMS: The /init-db/ page renders and responds to requests after first use 0.0 None -
kiwitcmsPyPI Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox 8.1 High -
kiwitcmsPyPI Stored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS 8.1 High -
kiwitcmsPyPI kiwitcms vulnerable to stored XSS via unrestricted files upload 8.1 High -
kiwitcmsPyPI Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow 8.8 High -
kiwitcmsPyPI Kiwi TCMS unrestricted file upload vulnerability 8.1 High -
kiwitcmsPyPI Kiwi TCMS may allow user to update email address to unverified one 3.9 Low -
kiwitcmsPyPI Stored cross site scripting via SVG file upload in Kiwi TCMS 7.6 High -
kiwitcmsPyPI Kiwi TCMS has denial of service vulnerability on Password reset page 7.5 High -
kiwitcmsPyPI Kiwi TCMS has no protection against brute-force attacks on login page 7.5 High -
kiwitcmsPyPI Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi 7.1 High