CVE-2022-4105
21.11.2022, 20:15
A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| kiwitcms | kiwi_tcms | 𝑥 < 11.6 |
𝑥
= Vulnerable software versions