Security Advisory

CVE-2019-15314

5.4
MEDIUM

Vulnerability Description

tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is executed upon visiting a tiki/tiki-download_file.php?display&fileId= URI.
Published Date August 22, 2019
Official Source NIST NVD Advisory