CVE-2024-46878

Mô tả

Tham khảo

• ColdFusionX/CVE-2024-46878-TikiCMS-XSS · Exploit
• tiki.org/article514-New-Security-Updates-Released-for-Tiki-27-x-LTS-26-x-and-24-x-LTS-and-Upgrade-is-Strongly-Recommended · Release Notes
• tiki.org/tiki-newsletters.php · Product

Lỗ hổng khác của tiki

• CVE-2024-46879TRUNG BÌNH 5.4A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. …
• CVE-2024-51509TRUNG BÌNH 4.8Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki-admin_modules.php) stored XSS payload in the Nam…
• CVE-2024-51508TRUNG BÌNH 4.8Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Index.
• CVE-2024-51507TRUNG BÌNH 4.8Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name.
• CVE-2024-51506TRUNG BÌNH 4.8Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages" stored XSS payload in the description.