ID de Prueba:	1.3.6.1.4.1.25623.1.0.171310
Categoría:	Web application abuses
Título:	Tiki Wiki CMS Groupware <= 27.0 Multiple XSS Vulnerabilities
Resumen:	Tiki Wiki CMS Groupware is prone to multiple cross-site; scripting (XSS) vulnerabilities.
Descripción:	Summary: Tiki Wiki CMS Groupware is prone to multiple cross-site scripting (XSS) vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-51506: Users who have certain permissions are able to insert a 'Create a Wiki Pages' stored XSS payload in the description. - CVE-2024-51507: Users who have certain permissions are able to insert a 'Create/Edit External Wiki' stored XSS payload in the Name. - CVE-2024-51508: Users who have certain permissions are able to insert a 'Create/Edit External Wiki' stored XSS payload in the Index. - CVE-2024-51509: Users who have certain permissions are able to insert a 'Modules' (aka tiki-admin_modules.php) stored XSS payload in the Name. Affected Software/OS: Tiki Wiki CMS Groupware version 27.0 and prior. Solution: No known solution is available as of 19th March, 2025. Information regarding this issue will be updated once solution details are available. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-51506 Common Vulnerability Exposure (CVE) ID: CVE-2024-51507 Common Vulnerability Exposure (CVE) ID: CVE-2024-51508 Common Vulnerability Exposure (CVE) ID: CVE-2024-51509
Copyright	Copyright (C) 2025 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.