CVE-2024-51509

Tiki Wiki CMS Groupware versions through 27.0 are vulnerable to a stored Cross-Site Scripting (XSS) flaw. Users with certain privileges can insert a malicious payload into the Name field of the "Modules" (specifically tiki-admin_modules.php). This vulnerability originates from the improper neutra...