CVEブラウザに戻る

CVE-2019-9961

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0480%

EPSS Percentile29.07th

Published2019年3月26日

Last Modified2024年11月21日

Vulnerability Description

A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Affected Platforms (CPE)

📦

Wikindx Project

Wikindx

< 5.7.0

References & Advisories

🔗 https://sourceforge.net/p/wikindx/code/2624/

🔗 https://sourceforge.net/p/wikindx/code/2656/

🔗 https://sourceforge.net/p/wikindx/code/2624/

🔗 https://sourceforge.net/p/wikindx/code/2656/

関連する脆弱性情報

CVE-2007-327710.0

Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administrative capa...

CVE-2019-129306.1

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8...

CVE-2019-135886.1

A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote atta...

CVE-2021-33406.1

A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to ...