CVE-2021-36551

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

Cross site scripting

TikiWiki v21.4 was discovered to contain a cross-site scripting XSS vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module...

CVE-2021-36551

CVE-2021-36551 affects TikiWiki v21.4, specifically the tiki-calendar.php component in the Add Event module. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Exploitation details or in-the-wild status ar...

Tiki Wiki CMS Groupware tiki-calendar.php RCE

Remote command execution vulnerability in Tiki Wiki CMS Groupware tiki-calendar.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...