kiwitcms Kiwi

Name: kiwitcms Kiwi
Brand: kiwitcms

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical2high6medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-33977US	medium5.4	0.87% (59th)	Exploit	no fix	2023-06-06	≤ < 12.4
CVE-2023-30628US	high8.8	3.60% (89th)	—	no fix	2023-04-24	≤ ≤ 12.2
CVE-2023-30613US	critical9.0	1.02% (63rd)	—	no fix	2023-04-24	≤ < 12.2
CVE-2023-25171US	medium5.9	0.92% (60th)	—	12.0	2023-02-15	12.0 → 12.0
CVE-2023-25156US	critical9.8	0.91% (60th)	—	12.0	2023-02-15	12.0 → 12.0
CVE-2023-22451US	high8.8	0.71% (53rd)	—	no fix	2023-01-02	≤ ≤ 11.6
CVE-2023-36809US	medium5.4	0.69% (53rd)	—	no fix	2023-07-05	≤ < 12.5
CVE-2023-27489US	medium5.4	0.48% (42nd)	—	no fix	2023-03-29	≤ < 12.1
CVE-2023-32686US	medium5.4	0.43% (37th)	—	no fix	2023-05-27	≤ < 12.3
CVE-2023-30544US	medium4.3OT elevated	0.42% (36th)	—	no fix	2023-04-24	≤ < 12.2

The flaw types (CWEs) most of these CVEs share.

CWE-434Unrestricted Upload of File with Dangerous Type4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-283Unverified Ownership1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-521Weak Password Requirements1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.