Vulnerabilities > Weseek

DATE CVE VULNERABILITY TITLE RISK
2018-09-07 CVE-2018-0653 Cross-site Scripting vulnerability in Weseek Growi
Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote attackers to inject arbitrary web script or HTML via Wiki page view.
network
weseek CWE-79
4.3
2018-09-07 CVE-2018-0652 Cross-site Scripting vulnerability in Weseek Growi
Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.
network
weseek CWE-79
3.5