CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

CVE-2024-46879

CVE-2024-46879 affects Tiki CMS version 21.2, specifically the tiki-admin_system.php endpoint. The issue is a Reflected Cross-Site Scripting (XSS) vulnerability in the POST data field zipPath, allowing an attacker to inject and execute arbitrary JavaScript via a crafted payload, with potential ac...