| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | = 1.6.1= 1.9.0= 1.9.1= 1.9.2= 1.9.3= 1.9.4= 1.9.5≤ 1.9.6 |
Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free