← All advisories

Medium severity5.4NVD Advisory· Published Mar 9, 2018· Updated Jun 17, 2026

CVE-2018-7290

CVE-2018-7290

Description

Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Tiki/Tikiwiki CMS\/groupware3 versions
cpe:2.3:a:tiki:tikiwiki_cms\/groupware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tiki:tikiwiki_cms\/groupware:*:*:*:*:*:*:*:*range: >=12.0,<12.13
- cpe:2.3:a:tiki:tikiwiki_cms\/groupware:18.0:*:*:*:*:*:*:*
- (no CPE)range: <12.13, <15.6, <17.2, <18.1

Patches

Vulnerability mechanics

References

2

sourceforge.net/p/tikiwiki/code/65537nvdPatch
www.openwall.com/lists/oss-security/2018/03/08/5nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.