Skip to content
OpenAdvisories

Vendor

Tiki Software Community Association

2 known vulnerabilities.

Products

Wiki CMS Groupware 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-34113 Public exploit

    Tiki Wiki CMS Authenticated Command Injection in Calendar Module

    An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the `viewmode` GET parameter in `tiki-calendar.php`. When the calendar module is enabled and an authenticated user has permission to a…

    Tiki Software Community Association Wiki CMS Groupware