CVE-2023-22852

Description

References

• karmainsecurity.com/KIS-2023-01 · Third Party Advisory
• tiki.org/articles · Vendor Advisory

Mais vulnerabilidades de tiki

• CVE-2024-46879MÉDIO 5.4A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. …
• CVE-2024-46878MÉDIO 5.4A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerab…
• CVE-2024-51509MÉDIO 4.8Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki-admin_modules.php) stored XSS payload in the Nam…
• CVE-2024-51508MÉDIO 4.8Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Index.
• CVE-2024-51507MÉDIO 4.8Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name.