| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki/tiki-manager | ≤ 17.1 | |
| tiki | = 17.1 |
Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free