Tiki Wiki CMS Groupware Multiple Vulnerabilities (Feb 2018)

Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-7303

The Calendar component in Tiki 17.1 allows HTML injection...

CVE-2018-7303

The Calendar component in Tiki 17.1 allows HTML injection...

CVE-2018-7303

CVE-2018-7303 concerns the Calendar component in Tiki 17.1, where HTML input from users is not properly filtered, enabling HTML injection. The primary documented impact is cross-site scripting risk via the Calendar module. The CVSS details indicate network access with low to moderate complexity a...