Vulnerabilities > Weseek

DATE CVE VULNERABILITY TITLE RISK
2018-09-07 CVE-2018-0653 Cross-site Scripting vulnerability in Weseek Growi
Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view.
network
low complexity
weseek CWE-79
6.1
2018-09-07 CVE-2018-0652 Cross-site Scripting vulnerability in Weseek Growi
Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.
network
low complexity
weseek CWE-79
4.8