Description
An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php.
Unscored
CVE-2018-7188
EUVD-2018-18930GHSA-6428-phr4-c7xf
An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator…
Published Feb 16, 2018 · Updated Sep 16, 2024 · Assigned by mitre