CVE-2024-46879-TikiCMS-XSS

CVE-2024-46879 - Vulnerabilidad de Cross-Site Scripting XSS Reflejado en Tiki CMS Tiki CMS - Vulnerabilidad de Cross-Site Scripting XSS Reflejado en el parámetro 'zipPath' Descargo de responsabilidad Destinado únicamente a fines educativos, de investigación y defensivos. El uso no autorizado cont...

CVE-2024-46879

A Reflected Cross-Site Scripting XSS vulnerability exists in the POST request data zipPath of tiki-adminsystem.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or...

CVE-2024-46879

Summary: CVE-2024-46879 affects Tiki 21.2, specifically the tiki-admin_system.php component, where a Reflected Cross-Site Scripting (XSS) flaw exists in the POST data parameter zipPath. The issue allows an attacker to inject and execute arbitrary JavaScript through a crafted payload, potentially ...