Tiki vulnerabilities

Products

• Tikiwiki Cms\/groupware 74
• Tiki 19

Newest

• tiki A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of... CVE-2024-46879 Public exploit 5.4 MediumMarch 23, 2026
• tiki A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in... CVE-2024-46878 Public exploit 5.4 MediumMarch 23, 2026
• tiki software community association wiki cms groupware, tiki tikiwiki cms\/groupware +1 more Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE CVE-2025-34111 Public exploit 9.3 CriticalJuly 15, 2025
• tiki wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3... CVE-2025-32461 9.9 CriticalApril 9, 2025
• tiki Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki... CVE-2024-51509 4.8 MediumOctober 28, 2024
• tiki Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External... CVE-2024-51508 4.8 MediumOctober 28, 2024
• tiki Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External... CVE-2024-51507 4.8 MediumOctober 28, 2024
• tiki Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages"... CVE-2024-51506 4.8 MediumOctober 28, 2024
• tiki Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP... CVE-2023-22853 8.8 HighJanuary 14, 2023
• tiki Tiki through 25.0 allows CSRF attacks that are related to tiki-importer.php and tiki-import_sheet... CVE-2023-22852 6.5 MediumJanuary 14, 2023
• tiki Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an... CVE-2023-22851 7.2 HighJanuary 14, 2023
• tiki Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object... CVE-2023-22850 8.8 HighJanuary 14, 2023
• tiki tikiwiki cms\/groupware TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the... CVE-2021-36551 5.4 MediumOctober 28, 2021
• tiki tikiwiki cms\/groupware TikiWiki v21.4 was discovered to contain a cross-site scripting (XSS) vulnerability in the... CVE-2021-36550 5.4 MediumOctober 28, 2021
• tiki tikiwiki cms\/groupware TikiWiki 21.2 allows templates to be edited without CSRF protection. This could allow an... CVE-2020-29254 Public exploit 8.8 HighDecember 11, 2020
• tiki tiki-login.php in Tiki before 21.2 sets the admin password to a blank value after 50 invalid... CVE-2020-15906 Public exploit EPSS 27.2% 9.8 CriticalOctober 22, 2020
• tiki Tiki before 21.2 allows XSS because [\s\/"\'] is not properly considered in lib/core/TikiFilter... CVE-2020-16131 6.1 MediumAugust 3, 2020
• tiki-wiki groupware cms, tiki tikiwiki cms\/groupware +1 more Cross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software CVE-2020-8966 6.5 MediumApril 1, 2020
• tiki, tiki tikiwiki cms\/groupware +1 more A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id... CVE-2013-6022 6.1 MediumFebruary 12, 2020
• tiki Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input... CVE-2011-4558 Public exploit 7.2 HighJanuary 27, 2020
• tiki wiki cms groupware, tikiwiki cms\/groupware +1 more Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php. CVE-2011-4336 Public exploit 6.1 MediumJanuary 15, 2020
• tiki Multiple cross-site scripting vulnerabilities in Tiki 7.2 and earlier allow remote attackers to... CVE-2011-4455 6.1 MediumNovember 20, 2019
• tiki Multiple cross-site scripting vulnerabilities in Tiki 8.0 RC1 and earlier allow remote attackers... CVE-2011-4454 6.1 MediumNovember 20, 2019
• tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 more Tiki Wiki CMS Groupware 5.2 has Local File Inclusion CVE-2010-4239 EPSS 13.4% 9.8 CriticalOctober 28, 2019
• tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 more Tiki Wiki CMS Groupware 5.2 has XSS CVE-2010-4240 6.1 MediumOctober 28, 2019
• tiki wiki cms groupware, tiki tikiwiki cms\/groupware +1 more Tiki Wiki CMS Groupware 5.2 has CSRF CVE-2010-4241 8.8 HighOctober 28, 2019
• tiki tikiwiki cms\/groupware tiki/tiki-upload_file.php in Tiki 18.4 allows remote attackers to upload JavaScript code that is... CVE-2019-15314 5.4 MediumAugust 22, 2019
• tiki tikiwiki cms\/groupware In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki... CVE-2018-20719 8.8 HighJanuary 15, 2019
• tiki tikiwiki cms\/groupware Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user... CVE-2018-14850 5.4 MediumAugust 13, 2018
• tiki tikiwiki cms\/groupware Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser... CVE-2018-14849 5.4 MediumAugust 13, 2018
• tiki tikiwiki cms\/groupware Cross Site Scripting (XSS) exists in Tiki before 12.13, 15.6, 17.2, and 18.1. CVE-2018-7290 5.4 MediumMarch 9, 2018
• tiki Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection... CVE-2018-7304 8.8 HighFebruary 21, 2018
• tiki tikiwiki cms\/groupware The Calendar component in Tiki 17.1 allows HTML injection. CVE-2018-7303 5.4 MediumFebruary 21, 2018
• tiki Tiki Wiki CMS XSS Vulnerability CVE-2018-7302 5.4 MediumFebruary 21, 2018
• tiki tikiwiki cms\/groupware An XSS vulnerability (via an SVG image) in Tiki before 18 allows an authenticated user to gain... CVE-2018-7188 5.4 MediumFebruary 16, 2018
• tiki tikiwiki cms\/groupware tiki wiki cms groupware <=15.2 has a xss vulnerability, allow attackers steal user's cookie. CVE-2016-7394 6.1 MediumFebruary 6, 2018
• tiki tikiwiki cms\/groupware Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before... CVE-2017-14925 8.0 HighSeptember 29, 2017
• tiki tikiwiki cms\/groupware Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before... CVE-2017-14924 8.0 HighSeptember 29, 2017
• tiki tikiwiki cms\/groupware TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the... CVE-2017-9145 6.1 MediumJune 26, 2017
• tiki tikiwiki cms\/groupware lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to... CVE-2017-9305 6.1 MediumMay 31, 2017
• tiki tikiwiki cms\/groupware A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a... CVE-2016-10143 7.5 HighJanuary 20, 2017
• tiki tikiwiki cms\/groupware Some forms with the parameter geo_zoomlevel_to_found_location in Tiki Wiki CMS 12.x before 12.10... CVE-2016-9889 6.1 MediumDecember 23, 2016
• tiki tikiwiki cms\/groupware SQL injection vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS,... CVE-2013-4715 7.5 HighNovember 6, 2013
• tiki tikiwiki cms\/groupware Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability CVE-2013-4714 Fix available 4.3 MediumNovember 6, 2013
• tiki tikiwiki cms\/groupware tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to load arbitrary... CVE-2012-5321 Public exploit EPSS 13.8% 5.8 MediumOctober 8, 2012
• tiki tikiwiki cms\/groupware Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before... CVE-2011-4551 Public exploit 4.3 MediumOctober 1, 2012
• tiki tikiwiki cms\/groupware TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path... CVE-2012-3996 Public exploit 5.0 MediumJuly 12, 2012
• tiki tikiwiki cms\/groupware TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary... CVE-2012-0911 Public exploit EPSS 63.0% 9.8 CriticalJuly 12, 2012
• tiki tikiwiki cms\/groupware The Standard Remember method in TikiWiki CMS/Groupware 3.x before 3.5 allows remote attackers to... CVE-2010-1136 7.5 HighMarch 26, 2010
• tiki tikiwiki cms\/groupware The user_logout function in TikiWiki CMS/Groupware 4.x before 4.2 does not properly delete user... CVE-2010-1135 7.5 HighMarch 26, 2010
• Show olderLoading…