Medium severity5.4NVD Advisory· Published Feb 16, 2018· Updated Jun 17, 2026
CVE-2018-7188
CVE-2018-7188
Description
An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain administrator privileges if an administrator opens a wiki page with a malicious SVG image, related to lib/filegals/filegallib.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:tiki:tikiwiki_cms\/groupware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tiki:tikiwiki_cms\/groupware:*:*:*:*:*:*:*:*range: <18
- (no CPE)range: <18
Patches
Vulnerability mechanics
References
2- sourceforge.net/p/tikiwiki/code/65327nvdPatch
- openwall.com/lists/oss-security/2018/02/16/1nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.