medium6.4
CVE-2016-2139
In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.class.php.
Impact
In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.class.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kippo-Graph Project | Kippo-Graph | before 1.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ikoniaris/kippo-graph/commit/e6587ec598902763110b70c8bd0a72f7951b4997
- https://github.com/ikoniaris/kippo-graph/issues/35
- https://github.com/ikoniaris/kippo-graph/commit/e6587ec598902763110b70c8bd0a72f7951b4997
- https://github.com/ikoniaris/kippo-graph/issues/35