CVE-2018-7188: Improper Neutralization of Input During Web Page Generation

An XSS vulnerability via an SVG image in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php...

PT-2018-17937

Name of the Vulnerable Software and Affected Versions Tiki versions prior to 18 Description The issue allows an authenticated user to gain administrator privileges by exploiting an XSS vulnerability via an SVG image. This occurs when an administrator opens a wiki page containing a malicious SVG...