CVE-2018-7302
Tiki Wiki CMS XSS Vulnerability
Résumé
Tiki Wiki CMS XSS Vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
tikiwiki/tiki-manager
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"17.1"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web websecnerd.blogspot.in