EUVD-2020-8097

Malware in sbrugna...

CVE-2020-16131

Tiki before 21.2 allows XSS because \s/"' is not properly considered in lib/core/TikiFilter/PreventXss.php...

Cross site scripting

Tiki before 21.2 allows XSS because \s/"' is not properly considered in lib/core/TikiFilter/PreventXss.php...

CVE-2020-16131

Tiki before 21.2 allows XSS because \s/"' is not properly considered in lib/core/TikiFilter/PreventXss.php...

PT-2020-14765

Name of the Vulnerable Software and Affected Versions Tiki versions prior to 21.2 Description The issue allows for XSS due to improper consideration of certain characters in the PreventXss.php file. Recommendations For versions prior to 21.2, update to version 21.2 or later to resolve the issue...

CVE-2020-16131: Improper Neutralization of Input During Web Page Generation

Tiki before 21.2 allows XSS because \s/"' is not properly considered in lib/core/TikiFilter/PreventXss.php...

Tiki Wiki CMS Groupware XSS Vulnerability

Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tiki Wiki CMS Groupware cross-site scripting vulnerability (CNVD-2017-11651)

Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in the...

CVE-2017-9305

lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via padded zero characters, as demonstrated by an attack on tiki-batchsendnewsletter.php...

CVE-2017-9305: Improper Neutralization of Input During Web Page Generation

lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via padded zero characters, as demonstrated by an attack on tiki-batchsendnewsletter.php...