Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-51506

Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages" stored XSS payload in the description.

Published

2024-10-28T23:15:02.667

Last Modified

2025-06-03T14:53:08.277

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application tiki tiki ≤ 27.0 Yes
References