Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-51507

Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name.

Published

2024-10-28T23:15:02.753

Last Modified

2025-06-03T14:55:25.300

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

Weaknesses

Type: Secondary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	tiki	tiki	≤ 27.0	Yes

References

https://github.com/r0ck3t1973/xss_payload/issues/9 Issue Tracking, Third Party Advisory ([email protected])
https://security.tiki.org/Disclose-a-Vulnerability Product ([email protected])