Tiki: >> Tikiwiki Cms/groupware >> 12.0 Security Vulnerabilities
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-06-26
Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10 LTS, 15.x before 15.3 LTS, and 16.x before 16.1 don't have the input sanitized, related to tiki-setup.php and article_image.php. The impact is XSS.
CVSS Score
6.1
EPSS Score
0.003
Published
2016-12-23
Page 2