CVE-2024-51507
Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name.
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web security.tiki.org