← All advisories

Medium severity5.4NVD Advisory· Published Feb 21, 2018· Updated Jun 17, 2026

CVE-2018-7302

CVE-2018-7302

Description

Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
tikiwiki/tiki-managerPackagist	<= 17.1	—

Affected products

2

Tiki/Tiki
cpe:2.3:a:tiki:tiki:17.1:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/tikiwiki/tiki-manager
Range: <= 17.1

Patches

Vulnerability mechanics

References

3

websecnerd.blogspot.in/2018/01/tiki-wiki-cms-groupware-17.htmlnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-7f2f-crxg-cpfvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-7302ghsaADVISORY

News mentions

0

No linked articles in our index yet.