Kiwitcms Kiwi Tcms vulnerabilities

• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox CVE-2023-36809 Fix available 8.1 HighJuly 5, 2023
• kiwitcms kiwi, kiwi tcms +1 more Stored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS CVE-2023-33977 Public exploitFix available 8.1 HighJune 6, 2023
• kiwitcms kiwi, kiwi tcms +1 more kiwitcms vulnerable to stored XSS via unrestricted files upload CVE-2023-32686 Fix available 8.1 HighMay 22, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow CVE-2023-30628 Fix available 8.8 HighApril 24, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS unrestricted file upload vulnerability CVE-2023-30613 Fix available 8.1 HighApril 24, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS may allow user to update email address to unverified one CVE-2023-30544 Fix available 3.9 LowApril 24, 2023
• kiwitcms kiwi, kiwi tcms +1 more Stored cross site scripting via SVG file upload in Kiwi TCMS CVE-2023-27489 Fix available 7.6 HighMarch 29, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS has denial of service vulnerability on Password reset page CVE-2023-25171 Fix available 7.5 HighFebruary 15, 2023
• kiwitcms kiwi, kiwi tcms +1 more Kiwi TCMS has no protection against brute-force attacks on login page CVE-2023-25156 Fix available 7.5 HighFebruary 15, 2023
• kiwitcms kiwi, kiwi tcms +1 more Weak password requirements in Kiwi TCMS CVE-2023-22451 6.5 MediumJanuary 2, 2023
• kiwitcms kiwitcms/kiwi, kiwi tcms +1 more Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi CVE-2022-4105 Fix available 7.1 HighNovember 21, 2022