medium5.4
CVE-2018-7302
Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.
Impact
Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tiki | Version 17.1 |