Login Request a demo
TC
Product
Tikiwiki Cms/groupware
by Tiki · last CVE Jul 15, 2025
74
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities74In the news0Timeline
Severity mix
Critical 3High 6Medium 16Low 0
Severity
All severities74Critical3High6Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tikiwiki Cms/groupware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-29254
8.8
2%
Dec 11
TikiWiki 21.2 allows templates to be edited without CSRF protection
Affected: 21.2
CVE-2010-4241
8.8
1%
Oct 28
Tiki Wiki CMS Groupware 5.2 has CSRF
Affected: 5.2
CVE-2018-20719
8.8
1%
Jan 15
In Tiki before 17.2, the user task component is vulnerable to a SQL Injection via the tiki-user_tasks.php show_history parameter
Affected: before 17.2
CVE-2017-14925
8.0
1%
Sep 30
Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated…
Affected: 12.0; 12.1; 12.2; 12.3; 12.4; 12.5; +15 more
CVE-2017-14924
8.0
0%
Sep 30
Cross-Site Request Forgery (CSRF) vulnerability via IMG element in Tiki before 16.3, 17.x before 17.1, 12 LTS before 12.12 LTS, and 15 LTS before 15.5 LTS allows an authenticated…
Affected: 12.0; 12.1; 12.2; 12.3; 12.4; 12.5; +15 more
CVE-2016-10143
7.5
2%
Jan 20
A vulnerability in Tiki Wiki CMS 15.2 could allow a remote attacker to read arbitrary files on a targeted system via a crafted pathname in a banner URL field
Affected: 15.2
Showing 6