CVE-2018-7302

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.

Published: 2018-02-21 · CVSS: Unscored

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7