| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | < 18 | 18 |
An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free