2018-02-21 20:00:00
mitre
PUBLISHED
Tiki 17.1 allows upload of a .PNG file that actually has SVG content, leading to XSS.