Every CVE whose affected-product data names Kujirahand Konawiki, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2021-20720 — CVSS 9.8 (critical): SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to…
CVE-2021-20721 — CVSS 9.8 (critical): KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP…
CVE-2020-5612 — CVSS 6.1 (medium): Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially…
CVE-2020-5613 — CVSS 6.1 (medium): Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially…
CVE-2020-5614 — CVSS 5.3 (medium): Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.