Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages" stored XSS payload in the description.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/r0ck3t1973/xss_payload/issues/8 | Issue Tracking |
| https://security.tiki.org/Disclose-a-Vulnerability | Product |
Configurations
History
03 Jun 2025, 14:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Tiki tiki
Tiki |
|
| CPE | cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:* | |
| References | () https://security.tiki.org/Disclose-a-Vulnerability - Product | |
| References | () https://github.com/r0ck3t1973/xss_payload/issues/8 - Issue Tracking |
28 Oct 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-28 23:15
Updated : 2025-06-03 14:53
NVD link : CVE-2024-51506
Mitre link : CVE-2024-51506
JSON object : View
Products Affected
tiki
- tiki
CWE
No CWE.
