CVE-2019-9961

A cross-site scripting (XSS) vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

• CWE-79

• https://sourceforge.net/p/wikindx/code/2624/Patch, Third Party Advisory
• https://sourceforge.net/p/wikindx/code/2656/Patch, Third Party Advisory
• https://sourceforge.net/p/wikindx/code/2624/Patch, Third Party Advisory
• https://sourceforge.net/p/wikindx/code/2656/Patch, Third Party Advisory

Published

Mar 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9955On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG4…
• CVE-2019-9956In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer o…
• CVE-2019-9957Stored XSS within Quadbase EspressReport ES (ERES) v7.0 upda…
• CVE-2019-9958CSRF within the admin panel in Quadbase EspressReport ES (ER…
• CVE-2019-9959The JPXStream::init function in Poppler 0.78.0 and earlier d…6.5
• CVE-2019-9960The downloadZip function in application/controllers/admin/ex…
• CVE-2019-9962XnView MP 0.93.1 on Windows allows remote attackers to cause…
• CVE-2019-9963XnView MP 0.93.1 on Windows allows remote attackers to cause…
• CVE-2019-9964XnView MP 0.93.1 on Windows allows remote attackers to cause…
• CVE-2019-9965XnView MP 0.93.1 on Windows allows remote attackers to cause…
• CVE-2019-9966XnView Classic 2.48 on Windows allows remote attackers to ca…
• CVE-2019-9967XnView Classic 2.48 on Windows allows remote attackers to ca…