Tiki CMS Reflected Cross-Site Scripting Vulnerability

A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Tiki CMS Groupware versions through 26.3. The issue resides in the 'page' parameter of the 'tiki-editpage.php' file. This vulnerability allows attackers to inject and execute arbitrary JavaScript in the context of the user's browser, potentially leading to session hijacking or unauthorized actions.

Impact

Exploitation of this vulnerability allows for the execution of arbitrary JavaScript in another user's browser, which could be used to hijack their session or perform unauthorized actions on their behalf.

Reproduction

To reproduce this vulnerability, send a GET request to 'tiki-editpage.php' with a crafted 'page' parameter that includes JavaScript code, such as an 'onmouseover' event. The injected script will be executed when the page is loaded, demonstrating the XSS vulnerability.

Remediation

Users are advised to upgrade to Tiki CMS Groupware version 27.1 or later, as this vulnerability has been fixed in that release.