Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Tiki vulnerabilities

3 published CVEs name Tiki among the affected products.

Published CVEs
3
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 0Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20202
  2. 20251

Newest CVEs

  • CVE-2025-32461

    wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2,…

    Tiki · Tiki

    Critical9.9
  • CVE-2013-6022

    A Cross-Site Scripting (XSS) vulnerability exists in Tiki Wiki CMG Groupware 11.0 via the id paraZeroClipboard.swf, which could let a remote malicious user…

    Tiki · Tiki

    Medium6.1
  • CVE-2011-4336

    Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.

    Tiki · Wiki CMS Groupware

    Medium6.1

Products with the most CVEs

  1. Tiki2
  2. Wiki CMS Groupware1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)2
  2. CWE-1336 1