Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

kiwitcms Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-55630`Kiwi TCMS: Stored XSS via javascript: URI in extra_link field (TestPlan & TestCase)	Exploitation statusNot confirmed	FixYes	Affected productKiwi	Published09/15/2026	SeverityInformational
`CVE-2026-54724`Kiwi TCMS: Open Redirect via unvalidated next parameter in account confirmation endpoint	Exploitation statusNot known exploited	FixYes	Affected productKiwi	Published09/15/2026	SeverityMedium
`CVE-2023-36809`Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox	Exploitation statusPublic exploit	FixNot confirmed	Affected productKiwi	Published07/05/2023	SeverityHigh
`CVE-2023-33977`Stored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS	Exploitation statusPublic exploit	FixNot confirmed	Affected productKiwi	Published06/06/2023	SeverityHigh
`CVE-2023-32686`kiwitcms vulnerable to stored XSS via unrestricted files upload	Exploitation statusNot known exploited	FixYes	Affected productKiwi	Published05/27/2023	SeverityHigh
`CVE-2023-30628`Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow	Exploitation statusPublic exploit	FixNot confirmed	Affected productKiwi	Published04/24/2023	SeverityHigh
`CVE-2023-30613`Kiwi TCMS unrestricted file upload vulnerability	Exploitation statusPublic exploit	FixNot confirmed	Affected productKiwi	Published04/24/2023	SeverityHigh
`CVE-2023-30544`Kiwi TCMS may allow user to update email address to unverified one	Exploitation statusPublic exploit	FixNot confirmed	Affected productKiwi	Published04/24/2023	SeverityLow
`CVE-2023-27489`Stored cross site scripting via SVG file upload in Kiwi TCMS	Exploitation statusNot known exploited	FixYes	Affected productKiwi	Published03/29/2023	SeverityHigh
`CVE-2023-25171`Kiwi TCMS has denial of service vulnerability on Password reset page	Exploitation statusNot known exploited	FixYes	Affected productKiwi	Published02/15/2023	SeverityHigh
`CVE-2023-25156`Kiwi TCMS has no protection against brute-force attacks on login page	Exploitation statusNot known exploited	FixYes	Affected productKiwi	Published02/15/2023	SeverityHigh
`CVE-2023-22451`Weak password requirements in Kiwi TCMS	Exploitation statusNot known exploited	FixYes	Affected productKiwi	Published01/02/2023	SeverityMedium
`CVE-2022-4105`Cross-site Scripting (XSS) - Stored in kiwitcms/kiwi	Exploitation statusPublic exploit	FixYes	Affected productkiwitcms/kiwi	Published11/21/2022	SeverityHigh

13 / 13 Results

All vulnerabilities loaded

Security vulnerabilities from kiwitcms

kiwitcms

How many security vulnerabilities does kiwitcms have?

Which kiwitcms product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular kiwitcms products

Kiwi

kiwitcms/kiwi