← All advisories

Medium severity6.1NVD Advisory· Published Mar 25, 2022· Updated Jun 17, 2026

CVE-2022-27920

CVE-2022-27920

Description

libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. This is fixed in 10.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Kiwix/Kiwixllm-fuzzy
Range: <10.1.0
Kiwix/Libkiwix2 versions
cpe:2.3:a:kiwix:libkiwix:10.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kiwix:libkiwix:10.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:kiwix:libkiwix:10.0.1:*:*:*:*:*:*:*
Fedoraproject/Fedora
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
libkiwix/libkiwixdescription

Patches

Vulnerability mechanics

References

3

github.com/kiwix/libkiwix/issues/728nvdIssue TrackingPatchThird Party Advisory
github.com/kiwix/libkiwix/pull/721nvdIssue TrackingPatchRelease NotesThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KD4KX5N2PGMIOQR2IZWEUTZCCTPWU3EJ/nvd

News mentions

0

No linked articles in our index yet.