Read the docs

Tiki Software Community Association

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tiki Software Community Association records in CISA KEV

No Tiki Software Community Association vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 45

An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the `viewmode` GET parameter in `tiki-calendar.php`.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02965 Published 2025-07-15 No fix listed CWE-20
Open these records in search →