Secunia

Two weaknesses have been reported in TikiWiki CMS/Groupware, which can be exploited by malicious people to conduct spoofing attacks.

Input passed to an unspecified script is not properly sanitised before being returned to the user. This can be exploited to display arbitrary text in the context of an affected site.

The weaknesses are reported in all 2.x versions prior to 2.2.

Solution
Update to version 2.2.

Provided and/or discovered by
Reported by the vendor, who credits Emanuele Gentili for one of the issues.

Changelog
Further details available in Customer Area

Original Advisory
http://info.tikiwiki.org/tiki-read_article.php?articleId=41

Deep Links
Links available in Customer Area