CVE-2021-36550
28.10.2021, 20:15
TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-browse_categories.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Create category module.
Vendor | Product | Version |
---|---|---|
tiki | tikiwiki_cms\/groupware | 21.4 |
𝑥
= Vulnerable software versions