CVE Intelligence

Vulnerabilidades de Tiki

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Tiki: 2 registro(s), com severidade, exploração e correções.

Tiki 2

Somente exploradas (KEV) →

CVE-2024-46879 Média · 5.4 CWE-79 23/03/2026
Cross-site Scripting (XSS) em Tiki
A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.
CVE-2024-46878 Média · 5.4 CWE-79 23/03/2026
Cross-site Scripting (XSS) em Tiki
A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.