CVE-2024-51509

Tiki Wiki CMS Groupware versions through 27.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists because users with certain permissions can insert a malicious XSS payload into the Name field of the Modules (also referred to as tiki-admin_modules.php). Practical c...