CVE-2024-51507

Tiki Wiki CMS Groupware versions prior to 27.1 (through 27.0) are vulnerable to a stored cross-site scripting (XSS) flaw. The issue originates from the improper neutralization of input during web page generation, specifically allowing users with certain permissions to insert a malicious XSS paylo...

CVE-2024-51507: Improper Neutralization of Input During Web Page Generation

Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name...

CVE-2024-51508: Improper Neutralization of Input During Web Page Generation

Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Index...

PT-2024-34670 · Tiki · Tiki

Name of the Vulnerable Software and Affected Versions: Tiki versions prior to 27.1 Description: The issue allows users with specific permissions to insert a stored XSS payload in the Index by creating or editing an external wiki. This can lead to the execution of malicious scripts. Recommendation...