| Package | Affected versions | Patched versions |
|---|---|---|
| tikiwiki cms/groupware | < 17.2 | 17.2 |
In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free