CVE-2018-7302
Tiki Wiki CMS XSS Vulnerability
Summary
Tiki Wiki CMS XSS Vulnerability
Original description
The description as published by the source.
Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
tikiwiki/tiki-manager
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"17.1"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web websecnerd.blogspot.in