CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2018-14850
Severity
MEDIUM
CVSS
5.4
EPSS
0.68%
Java
Original NVD Description
Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image.
Related CVEs
Other vulnerabilities affecting the same vendor(s)