| Kiwi TCMS account confirmation open redirect through protocol-relative URLsCVE-2026-77433 · GHSA-GCWF-C25F-P9RV |
kiwitcms |
PyPI |
Medium
|
No fix reported |
|
| kiwitcms vulnerable to stored cross-site scripting via unrestricted file uploadCVE-2023-33977 · GHSA-2FQM-M4R2-FH98Version ranges need review. |
kiwitcms |
PyPI |
High
|
Fix reported |
|
| kiwitcms vulnerable to stored XSS via unrestricted files uploadCVE-2023-32686 · GHSA-X7C2-7WVG-JPX7Version ranges need review. |
kiwitcms |
PyPI |
Medium
|
Fix reported |
|
| No protection against brute-force attacks on login pageCVE-2023-25156 · GHSA-7968-H4M4-GHM9Version ranges need review. |
kiwitcms |
PyPI |
High
|
Fix reported |
|
| kiwi TCMS has possibility for user to update email address to unverified oneCVE-2023-30544 · GHSA-7X6Q-3V3M-CWJGVersion ranges need review. |
kiwitcms |
PyPI |
Low
|
Fix reported |
|
| Kiwi TCMS Stored Cross-site Scripting via SVG fileCVE-2023-27489 · GHSA-2WCR-87WF-CF9JVersion ranges need review. |
kiwitcms |
PyPI |
High
|
Fix reported |
|
| Denial of service vulnerability on Password reset pageCVE-2023-25171 · GHSA-7J9H-3JXF-3VRFVersion ranges need review. |
kiwitcms |
PyPI |
High
|
Fix reported |
|
| Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)CVE-2026-55630 · GHSA-473P-56XX-VG67Version ranges need review. |
kiwitcms |
PyPI |
Low
|
No fix reported |
|
| Kiwi TCMS has an Open Redirect via unvalidated next parameter in account confirmation endpointCVE-2026-54724 · GHSA-HMJ5-JM8H-H9FHVersion ranges need review. |
kiwitcms |
PyPI |
Medium
|
No fix reported |
|
| Kiwi TCMS's /init-db/ page renders and responds to requests after first useCVE-2026-49292 · GHSA-V8RP-6XCV-FWGHVersion ranges need review. |
kiwitcms |
PyPI |
Low
|
No fix reported |
|
| Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with FirefoxCVE-2023-36809 · GHSA-JPGW-2R9M-8QFWVersion ranges need review. |
kiwitcms |
PyPI |
High
|
Fix reported |
|
| Unrestricted file upload in kiwi TCMSCVE-2023-30613 · GHSA-FWCF-753V-FGCJVersion ranges need review. |
kiwitcms |
PyPI |
High
|
Fix reported |
|
| Cross-site Scripting in kiwitcmsCVE-2022-4105 · GHSA-HF94-8MX5-2VVJVersion ranges need review. |
kiwitcms |
PyPI |
Medium
|
Fix reported |
|
| PYSEC-2023-273CVE-2023-30628 · GHSA-CW6R-6CCX-5HWX |
kiwitcms |
PyPI |
High
|
Fix reported |
|
