Описание
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.
Ссылки
- ExploitThird Party Advisory
- Release Notes
- Product
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 21.11 (исключая)
cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00195
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
debian
6 месяцев назад
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POS ...
CVSS3: 5.4
github
6 месяцев назад
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.
EPSS
Процентиль: 10%
0.00195
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79