Lucene search
+L

3 matches found

Kitploit
Kitploit
added 2026/09/10 6:41 p.m.9 views

CVE-2024-46879-TikiCMS-XSS

CVE-2024-46879 - Tiki CMS 反射型跨站脚本(XSS)漏洞 Tiki CMS - 'zipPath' 参数反射型跨站脚本(XSS)漏洞 免责声明 仅供教育、研究和防御目的 。未经许可针对系统进行未授权使用是违法的。 摘要 在 Tiki 版本 21.11 之前的版本中,tiki-adminsystem.php 的 POST 请求数据 zipPath 存在反射型跨站脚本(XSS)漏洞。攻击者可通过精心构造的有效载荷执行任意 JavaScript 代码,可能导致访问敏感信息或执行未授权操作。 受影响的产品 产品:Tiki CMS Groupware 版本:21.11 之前...

5.4CVSS6.6AI score0.00195EPSS
SaveExploits1
NVD
NVD
added 2026/03/23 8:16 p.m.13 views

CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

5.4CVSS0.00195EPSS
SaveExploits1References3
CVE
CVE
added 2026/03/23 12:00 a.m.25 views

CVE-2024-46879

Summary: CVE-2024-46879 affects Tiki 21.2, specifically the tiki-admin_system.php component, where a Reflected Cross-Site Scripting (XSS) flaw exists in the POST data parameter zipPath. The issue allows an attacker to inject and execute arbitrary JavaScript through a crafted payload, potentially ...

5.4CVSS6.2AI score0.00195EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder