CVE-2020-16131 – Tiki before 21.2 allows XSS because [s/”‘] is not properly considered

Tiki before 21.2 allows XSS because [s/”‘] is not properly considered in lib/core/TikiFilter/PreventXss.php.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16131

Reference (s):

• https://gitlab.com/tikiwiki/tiki/-/commit/d12d6ea7b025d3b3f81c8a71063fe9f89e0c4bf1
• https://tiki.org/News