PatchTheCVEwikindx vulnerabilities and fixes
Recent CVEs affecting wikindx, with upgrade or downgrade steps. 4 tracked.
wikindx has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-02-01. Highest priority: CVE-2019-12930 (score 38/100).
- CVE-2021-3340 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows
- CVE-2019-9961 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wiki
- CVE-2019-13588 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.
- CVE-2019-12930 MEDIUM 6.1 UPGRADE A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX
FAQ
How do I fix wikindx vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wikindx being exploited right now?
None of the tracked wikindx CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wikindx CVE should I patch first?
CVE-2019-12930 currently ranks highest (38/100): A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX .