Security audit fixes (18.x)

Victor Emanouilov requested to merge tikiwiki/security/tiki:bugfix/security-18 into 18.x Mar 01, 2023