CVE-2018-7302

2018-02-2120:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.9%

JSON

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.

CPENameOperatorVersion
tikieq3.0rc1
tikieq12.1
tikieq11.0beta
tikieq9.0beta2
tikieq14.0
tikieq17.0alpha
tikieq9.2beta1
tikieq10.0beta
tikieq3.0beta4
tikieq13.0

Name	Operator	Version
tiki	eq	3.0rc1
tiki	eq	12.1
tiki	eq	11.0beta
tiki	eq	9.0beta2
tiki	eq	14.0
tiki	eq	17.0alpha
tiki	eq	9.2beta1
tiki	eq	10.0beta
tiki	eq	3.0beta4
tiki	eq	13.0

Rows per page:

1-10 of 371

References

websecnerd.blogspot.in/2018/01/tiki-wiki-cms-groupware-17.html