Tikiwiki Cms/groupware vulnerabilities

1 known vulnerability in Tikiwiki Cms/groupware from Tiki. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Wiki CMS Groupware: Unrestricted Upload of File with Dangerous Type

  CVE-2025-34111Jul 15, 2025Tiki Software Community AssociationEPSS 2.57%

  An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector (connector.minimal.php), which allows remote attackers to upload and execute malicious PHP scripts