Wiki CMS Groupware vulnerabilities

2 known vulnerabilities in Wiki CMS Groupware from Tiki Software Community Association. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4…

  CVE-2025-34113Jul 15, 2025Tiki Software Community AssociationEPSS 2.96%

  An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the `viewmode` GET parameter in `tiki-calendar.php`. When the calendar module is enabled and an authenticated user has permission to ac

• 9.8 Critical severity

  Wiki CMS Groupware: Unrestricted Upload of File with Dangerous Type

  CVE-2025-34111Jul 15, 2025Tiki Software Community AssociationEPSS 2.57%

  An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector (connector.minimal.php), which allows remote attackers to upload and execute malicious PHP scripts