Design/Logic Flaw

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php...

CVE-2017-17889: Improper Neutralization of Input During Web Page Generation

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php...

PT-2018-6588

Name of the Vulnerable Software and Affected Versions: Kliqqi CMS version 3.5.2 Description: The issue allows for XSS attacks through crafted input in specific fields. This can be achieved by using a crafted group name in pligg/groups.php, a crafted Homepage string in a user's profile, or a craft...