Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

tikiwiki/tiki-manager

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Packagist

Advisories 2

  • Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.

    Affected: through 17.1.

  • Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x…

    Affected: from 6.0, fixed in 6.13; from 9.0, fixed in 9.7; from 10.0, fixed in 10.4; from 11.0, fixed in 11.1.