Unscored CVE-2021-36551 EUVD-2021-23153GHSA-qc2r-j24r-r6qm

TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability …

Published Oct 28, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the component tiki-calendar.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload under the Add Event module.

References

https://github.com/r0ck3t1973/xss_payload/issues/7