EUVD-2021-23152

Malware in sbrugna...

CVE-2021-36551

CVE-2021-36551 affects TikiWiki v21.4, specifically the tiki-calendar.php component in the Add Event module. The vulnerability is a cross-site scripting (XSS) flaw that allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Exploitation details or in-the-wild status ar...

CVE-2021-36550

CVE-2021-36550 affects TikiWiki v21.4 and stems from a cross-site scripting (XSS) flaw in the tiki-browse_categories.php component. The issue enables an attacker to run arbitrary web scripts or HTML via a crafted payload in the Create category module. The reports cite an XSS susceptibility but do...