medium5.4
CVE-2018-14850
Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administ…
Impact
Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tikiwiki Cms\/Groupware | from 12.0 before 12.14 from 15.0 before 15.7 from 18.0 before 18.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2018/08/02/1
- http://www.openwall.com/lists/oss-security/2018/08/02/2
- https://sourceforge.net/p/tikiwiki/code/66990
- http://www.openwall.com/lists/oss-security/2018/08/02/1
- http://www.openwall.com/lists/oss-security/2018/08/02/2
- https://sourceforge.net/p/tikiwiki/code/66990