CVE-2018-14849: Improper Neutralization of Input During Web Page Generation

Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php...

PT-2018-12760

Name of the Vulnerable Software and Affected Versions Tiki versions prior to 18.2 Tiki versions prior to 15.7 Tiki versions prior to 12.14 Description The issue is related to cross-site scripting XSS via link attributes. It is associated with the files lib/core/WikiParser/OutputLink.php and...