Most recent entries from all

cnvd-2018-18606

2026-10-21T16:51:52.766796+00:00

cnvd-2018-18606

EUVD-2026-60879

2026-10-21T16:51:52.766833+00:00

EUVD-2026-60879

fkie_cve-2018-0652

2026-10-21T16:51:52.766849+00:00

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.

GHSA-wqqh-3rjj-w6x7

2026-10-21T16:51:52.766880+00:00

Cross-site scripting vulnerability in GROWI v.3.1.11 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via the UserGroup Management section of admin page.

gsd-2018-0652

2026-10-21T16:51:52.766896+00:00

gsd-2018-0652

jvndb-2018-000085

2026-10-21T16:51:52.766907+00:00

GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. * Stored cross-site scripting vulnerability in the UserGroup Management section of admin page (CWE-79) - CVE-2018-0652 * Stored cross-site scripting vulnerability in Wiki page view (CWE-79) - CVE-2018-0653 * Reflected cross-site scripting vulnerability in the modal for creating Wiki page (CWE-79) - CVE-2018-0654 * Stored cross-site scripting in the app settings section of admin page (CWE-79) - CVE-2018-0655 The following researchers reported the vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2018-0652, CVE-2018-0653 Yoshinori Hayashi of Information Science College CVE-2018-0654, CVE-2018-0655 Kanta Nishitani of Information Science College