CVE-2019-13588: Wikindx Project Wikindx

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in getPagingStart() in core/lists/PAGING.php in WIKINDX before 5.8.2 allows remote attackers to inject arbitrary web script or HTML via the PagingStart parameter.

Affected products

• Wikindx Project Wikindx: up to and including 5.8.1

Published 2019-07-26. Last modified 2026-06-17.