CVE-2020-20406: Improper Neutralization of Input During Web Page Generation

A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom attributes...

CVE-2018-14849

Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php...

Code injection

Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php...

CVE-2018-14849

Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php...

CVE-2018-14849

CVE-2018-14849 affects Tiki before 18.2, 15.7, and 12.14 with cross-site scripting via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php. The CVE is documented by NVD with CVSS-2/3 scores (base 3.5/5.4; LOW to MEDIUM), indicating a network-accessible vect...

PT-2018-12760

Name of the Vulnerable Software and Affected Versions Tiki versions prior to 18.2 Tiki versions prior to 15.7 Tiki versions prior to 12.14 Description The issue is related to cross-site scripting XSS via link attributes. It is associated with the files lib/core/WikiParser/OutputLink.php and...

CVE-2018-14849: Improper Neutralization of Input During Web Page Generation

Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php...