CVE-2025-32461
Published
CVSS v3
9.9
CRITICAL
CVSS v2
N/A
Affected
1
PROJECT
Description
wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3.
Tiki Wiki CMS Groupware is a comprehensive web application for group collaboration and communication as well as data input, management and presentation that has been continuously developed since 2002 (23 years!). The software design of this no-code/low-code solution is to include the most-needed components in the core code rather than relying on third-party plugins and extensions. Tiki is community-managed, and open development is pursued by the Tiki Software Community Association, a non-profit corporation. The Tiki project values and facilitates the participation of its coders, power users, and other collaborators, and welcomes anyone who is interested to join us.
This is Tiki's public Git repository, for receiving merge requests. When unsure which branch to use see https://dev.tiki.org/Where-To-Commit