CVE-2020-16131

2020-08-0317:15:11

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

Tiki before 21.2 allows XSS because [\s/"'] is not properly considered in lib/core/TikiFilter/PreventXss.php.

CPENameOperatorVersion
tikieq19.0alpha
tikieq9.2beta1
tikieq10.0alpha
tikieq12.0
tikieq12.1alpha
tikieq3.0beta3
tikieq8.1
tikieq20.0beta
tikieq20.0RC1
tikieqtags/21.0RC1

Name	Operator	Version
tiki	eq	19.0alpha
tiki	eq	9.2beta1
tiki	eq	10.0alpha
tiki	eq	12.0
tiki	eq	12.1alpha
tiki	eq	3.0beta3
tiki	eq	8.1
tiki	eq	20.0beta
tiki	eq	20.0RC1
tiki	eq	tags/21.0RC1

Rows per page:

1-10 of 491

References

gitlab.com/tikiwiki/tiki/-/commit/d12d6ea7b025d3b3f81c8a71063fe9f89e0c4bf1

tiki.org/News