Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cqhp-94c2-gjjc

Опубликовано: 23 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

EPSS

Процентиль: 10%
0.00195
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
6 месяцев назад

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

CVSS3: 5.4
debian
6 месяцев назад

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POS ...

EPSS

Процентиль: 10%
0.00195
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79