CVE-2006-6162

Tikiwiki Cms/groupware - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Scores

EPSS 0.0035
EPSS Percentile 56.9%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

tiki/tikiwiki_cms\/groupware

Timeline

Published Nov 29, 2006
Tracked Since Feb 18, 2026