Tiki

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 93
    Known Exploited: 0
    7
    Critical Level Threats
    31
    High Level Threats
    54
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-46878

    A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

    Last Modified: Apr 03, 2026
    Published: Mar 23, 2026

    CVE-2024-46879

    A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2. This vulnerability allows attackers to execute arbitrary JavaScript code via a crafted payload, leading to potential access to sensitive information or unauthorized actions.

    Last Modified: Apr 03, 2026
    Published: Mar 23, 2026

    CVE-2025-34111

    Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE

    Last Modified: Apr 07, 2026
    Published: Jul 15, 2025

    CVE-2025-34113

    Tiki Wiki CMS Authenticated Command Injection in Calendar Module

    Last Modified: Apr 15, 2026
    Published: Jul 15, 2025

    CVE-2025-32461

    wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3.

    Last Modified: Apr 15, 2026
    Published: Apr 09, 2025
    Items Per Page
    Tiki Vulnerabilities & Security CVEs | CVE-DB