Known vulnerabilities in Kiwi

Vendor: Kiwi TCMS
Software: Kiwi
Software CPE: cpe:2.3:a:kiwitcms:kiwi:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kiwi Kiwi is affected by 11 known vulnerabilities: 1 high, 7 medium, 3 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139249 - Improper input validation
CWE-20 Medium
No
No
16.2 23.07.2026 SB2026072373
#VU139248 - Server-Side Request Forgery (SSRF)
CWE-918 Medium
No
No
16.2 23.07.2026 SB2026072373
#VU139247 - Exposure of sensitive information to an unauthorized actor
CWE-200 Medium
No
No
16.2 23.07.2026 SB2026072373
#VU139244 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
16.2 23.07.2026 SB2026072373
#VU135979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-55630
CWE-79 Low
No
No
16.1 30.06.2026 SB2026063064
#VU135976 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-54724
CWE-601 Medium
No
No
16.1 30.06.2026 SB2026063064
#VU76449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
12.3 23.05.2023 SB2023052327
#VU75689 - Unverified Ownership
CVE-2023-30544
CWE-283 Medium
No
No
12.2 03.05.2023 SB2023050309
#VU75688 - Unrestricted Upload of File with Dangerous Type
CVE-2023-30613
CWE-434 Medium
No
No
12.2 03.05.2023 SB2023050309
#VU75687 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-30628
CWE-78 High
No
No
834c86dfd1b2492ccad7ebbfd6304bfec895fed2 03.05.2023 SB2023050308
#VU70717 - Weak Password Requirements
CVE-2023-22451
CWE-521 Low
No
No
11.7 05.01.2023 SB2023010515