CVE-2018-7290

MEDIUM 5.4CVE-2018-7290 · Published 09/03/2018 · updated 17/06/2026

In short

CVE-2018-7290 is a MEDIUM (CVSS 5.4) vulnerability affecting tikiwiki cms/groupware (tiki).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.0% of all vulnerabilities.
Fix: update to 12.13, 15.6, 17.2 or later.

Package	Affected versions	Patched versions
tikiwiki cms/groupware tiki	`= 18.0≥ 12.0, < 12.13≥ 15.0, < 15.6≥ 17.0, < 17.2`	`12.1315.617.2`

Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 18.0≥ 12.0, < 12.13≥ 15.0, < 15.6≥ 17.0, < 17.2

12.1315.617.2

More vulnerabilities in tikiwiki cms/groupware

See all →