CVEs affecting projects tracked on Release Alert, from NVD & OSV.
kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.