Vulnerabilities > Weseek > Growi
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-09-07 | CVE-2018-0653 | Cross-site Scripting vulnerability in Weseek Growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view. | 4.3 |
| 2018-09-07 | CVE-2018-0652 | Cross-site Scripting vulnerability in Weseek Growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page. | 3.5 |