Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jvjc-r7p7-fpch

Опубликовано: 23 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

EPSS

Процентиль: 10%
0.00195
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
6 месяцев назад

A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

CVSS3: 5.4
debian
6 месяцев назад

A Cross-Site Scripting (XSS) vulnerability exists in the page paramete ...

EPSS

Процентиль: 10%
0.00195
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79