PT-2020-14703 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 21.2 Description: The issue allows an attacker to set the admin password to a blank value after a certain number of invalid login attempts. There have been reports of activities targeting this issue. Recommendations: Fo...

Cross site scripting

Tiki before 21.2 allows XSS because \s/"' is not properly considered in lib/core/TikiFilter/PreventXss.php...