Vulnerabilities > Weseek
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-09-07 | CVE-2018-0653 | Cross-site Scripting vulnerability in Weseek Growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view. | 6.1 |
2018-09-07 | CVE-2018-0652 | Cross-site Scripting vulnerability in Weseek Growi Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page. | 4.8 |