Vendors / Tiki Software Community Association Tiki Software Community Association Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Tiki Software Community Association records in CISA KEV No Tiki Software Community Association vulnerabilities are listed in CISA KEV.
Priority MEDIUM 45
An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the `viewmode` GET parameter in `tiki-calendar.php`.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.02965 · Published 2025-07-15 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
Critical0 High1 Medium0 Low0 No CVSS0