A stored XSS in a kiwi Test Plan can run malicious javascript which could be chained with an HTML injection to perform a UI redressing attack (clickjacking) and an HTML injection which disables the use of the history page.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| kiwitcms(PyPI) | 0 | 11.6 | N/A |
CVSS Metrics
