← Database

CVE-2022-4105

MEDIUM CVSS: 5.4 Published: 2022-11-21 Modified: 2026-06-17

Description

A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.

Affected Platforms

Kiwitcms Kiwi Tcms

Weakness Type

CWE-79, CWE-79

References