← All advisories

Medium severity6.1NVD Advisory· Published Mar 25, 2022· Updated Jun 17, 2026

CVE-2022-27920

CVE-2022-27920

Description

libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. This is fixed in 10.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

libkiwix/libkiwixdescription
Kiwix/Kiwixllm-fuzzy
Range: <10.1.0

Patches

Vulnerability mechanics

References

3

github.com/kiwix/libkiwix/issues/728nvdIssue TrackingPatchThird Party Advisory
github.com/kiwix/libkiwix/pull/721nvdIssue TrackingPatchRelease NotesThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KD4KX5N2PGMIOQR2IZWEUTZCCTPWU3EJ/nvd

News mentions

0

No linked articles in our index yet.