Tiki Software Community Association vulnerabilities
We track 2 vulnerabilities in Tiki Software Community Association products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Tiki Software Community Association vulnerabilities
- 8.7 High severity
An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4…
An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the `viewmode` GET parameter in `tiki-calendar.php`. When the calendar module is enabled and an authenticated user has permission to ac
- 9.8 Critical severity
Wiki CMS Groupware: Unrestricted Upload of File with Dangerous Type
An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector (connector.minimal.php), which allows remote attackers to upload and execute malicious PHP scripts