Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Kiwix before 0.9.1, when using kiwix-serve, allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to /search.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kiwix 跨站脚本漏洞
Vulnerability Description
Kiwix是软件开发者Emmanuel Engelhart所研发的一套用于离线浏览维基百科的免费应用软件。该软件可读取zim格式文件（维基百科的内容以压缩形式存储在zim格式的文件中）以达到帮助用户在没有网络链接的情况下浏览维基百科的目的。 Kiwix 0.9.1之前版本中存在跨站脚本漏洞，该漏洞源于/search URI没有充分过滤‘pattern’参数。当程序使用kiwix-serve时，远程攻击者可利用该漏洞注入任意Web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A