Description
tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-download_file.php?display&fileId= URI.
Unscored
CVE-2019-15314
EUVD-2019-6315GHSA-v22g-4cq3-hrw2
tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-downloa…
Published Aug 22, 2019 · Updated Aug 5, 2024 · Assigned by mitre