| Package | Affected versions | Patched versions |
|---|---|---|
| tiki | ≤ 27.0 |
Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki-admin_modules.php) stored XSS payload in the Name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free