CVE-2024-46879-TikiCMS-XSS

CVE-2024-46879 - Vulnerabilità di Cross-Site Scripting XSS Riflessa in Tiki CMS Tiki CMS - Vulnerabilità di Cross-Site Scripting XSS Riflessa nel Parametro 'zipPath' Disclaimer Destinato solo a scopi educativi, di ricerca e difensivi. L'uso non autorizzato contro sistemi senza autorizzazione è...

CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

CVE-2024-46879

Summary: CVE-2024-46879 affects Tiki 21.2, specifically the tiki-admin_system.php component, where a Reflected Cross-Site Scripting (XSS) flaw exists in the POST data parameter zipPath. The issue allows an attacker to inject and execute arbitrary JavaScript through a crafted payload, potentially ...