| Package | Affected versions | Patched versions |
|---|---|---|
| tiki | < 27.1 | 27.1 |
A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free