CVE-2020-8966

概要

参考情報

• sourceforge.net/p/tikiwiki/code/75455 · Patch
• incibe-cert.es/en/early-warning/security-advisories/cross-site-scripting-xss-flaws-found-tiki-wiki-cms-software · Third Party Advisory

tikiwiki cms/groupware のその他の脆弱性

• CVE-2025-34111緊急 9.8An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component…
• CVE-2021-36551中 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability a…
• CVE-2021-36550中 5.4TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulner…
• CVE-2020-29254高 8.8TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an unauthenticated, remote attacker to conduct a cross…
• CVE-2013-6022中 6.1A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote…