CVE-2026-55630
2 advisories.
PyPI/kiwitcms CVE-2026-55630: unknown 0, EPSS 0.42%
Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 12.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-473p-56xx-vg67
- https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-473p-56xx-vg67
- https://github.com/kiwitcms/Kiwi
- https://github.com/kiwitcms/Kiwi/releases/tag/v16.1
- https://kiwitcms.org/blog/kiwi-tcms-team/2026/06/24/kiwi-tcms-161
CVE-2026-55630 · published · modified · JSON
PyPI/kiwitcms CVE-2026-55630: unknown 0, EPSS 0.42%
Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 12.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-2551
- https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-473p-56xx-vg67
- https://github.com/kiwitcms/Kiwi
- https://github.com/kiwitcms/Kiwi/releases/tag/v16.1
- https://kiwitcms.org/blog/kiwi-tcms-team/2026/06/24/kiwi-tcms-161
- https://pypi.org/project/kiwitcms
- https://github.com/advisories/GHSA-473p-56xx-vg67
- https://nvd.nist.gov/vuln/detail/CVE-2026-55630
CVE-2026-55630 · published · modified · JSON