CVE-2016-2138

CVE-2016-2138

Vendor N/A

Product kippo-graph

Weakness CWE-79 · XSS

Published July 28, 2022

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.class.php.

Key dates

02Disclosure timeline

July 28, 2022 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-2138 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-27802 Stored Cross-Site Scripting in Episerver Content Management System (CMS) Edit Preview CVE-2024-1596 Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload CVE-2016-15010 University of Cambridge django-ucamlookup Lookup cross site scripting CVE-2021-20280 CVE-2024-10832 Posti Shipping <= 3.10.3 - Reflected Cross-Site Scripting