Tiki Wiki CMS Groupware Multiple Vulnerabilities (Feb 2018)

Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-7302

CVE-2018-7302 affects Tiki Wiki CMS Groupware 17.1. The issue arises when a PNG upload is actually SVG content, enabling cross-site scripting (XSS). Data from multiple sources confirms the vulnerability, with the impact described as XSS and the CVSS vectors indicating network attack with low to m...