Back to CVE Browser

CVE-2019-12930

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0500%

EPSS Percentile36.65th

PublishedJul 8, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter.

Affected Platforms (CPE)

📦

Wikindx Project

Wikindx

< 5.8.1

References & Advisories

🔗 https://sourceforge.net/p/wikindx/code/2787

🔗 https://sourceforge.net/p/wikindx/code/2788

🔗 https://sourceforge.net/p/wikindx/news/2019/07/wikindx-581-released/

🔗 https://sourceforge.net/p/wikindx/code/2787

🔗 https://sourceforge.net/p/wikindx/code/2788

🔗 https://sourceforge.net/p/wikindx/news/2019/07/wikindx-581-released/

Related Vulnerabilities

CVE-2007-327710.0

Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capa...

CVE-2019-99616.1

A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version...

CVE-2019-135886.1

A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote atta...

CVE-2021-33406.1

A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to ...