Description Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1. References https://sourceforge.net/p/tikiwiki/code/65537 [oss-security] 20180308 CVE-2018-7290: Stored XSS vulnerability in Tiki <= 18 mailing-list