repository icon
kiwitcms / kiwi Project repository

open source test management system with over 2 million downloads!

Submit a report

FIRST INTERACTION

WITHIN2 DAYS

REVIEW

WITHIN40 DAYS

FIX

WITHIN75 DAYS

Stored XSS
mq-xz
High
Base64 Injection & Silent Exception Catching
ellord0xd
spam
Stored XSS via file upload in FireFox
mnqazi
High
Stored XSS Via SVG Upload
mnqazi
High
Stored XSS with CSP bypass through JS file upload
ek1ng
duplicate
Medium
"csrfmiddlewaretoken" reuse to reset password for any user
bikesh-yadav
not applicable
Stored XSS and CSP Bypass in KiwiTCMS
antoniospataro
High
Failure to invalidate session after password change
novemberdad
not applicable
Account Owner Email Adrress Leakage Lead To Improper Access Control
novemberdad
None
XSS in file Upload attachment SVG extension
tht1997
duplicate
Medium
IDOR in bug report
sanket-722
not applicable
Stored XSS Via SVG File Upload
1d8
Medium
No Protection against Bruteforce attacks on Login page
satya250
High
Weak Password Implimentation
satya250
Medium
No rate limiting on the reset password page will lead to a DOS attack and inbox...
mosaa404
Critical
Unrestricted Upload of file with dangerous type lead to destroying the company's...
mosaa404
Low
An unrestricted upload file lead to a stored XSS via SVG file.
mosaa404
High
Stored XSS in kiwiTCMS
antoniospataro
High
Stored XSS and HTML injection from markdown
antoniospataro
High
•CVE-2022-4105