| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | ≥ 12.0, < 12.14≥ 15.0, < 15.7≥ 18.0, < 18.2 | 12.1415.718.2 |
Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free