Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tiki 跨站脚本漏洞
Vulnerability Description
Tiki是Tiki软件社区的一套开源的内容管理和门户应用程序，它可用于创建Web应用程序、门户网站、企业内部网、外联网等。 Tiki 18.2之前版本、15.7版本和12.14版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入JavaScript代码以获取管理员权限。
CVSS Information
N/A
Vulnerability Type
N/A