medium6.1
CVE-2017-9145
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
Impact
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tikiwiki Cms\/Groupware | Versions 12.0, 12.1, 12.2, 12.3, 12.4, 12.5 |