tikiwiki/tiki

tikiwiki/tiki

Releases151
Frequency4 weeks 23 hours
Last Release
Stars81
Tiki Wiki CMS Groupware is a comprehensive web application for group collaboration and communication as well as data input, management and presentation that has been continuously developed since 2002 (23 years!). The software design of this no-code/low-code solution is to include the most-needed components in the core code rather than relying on third-party plugins and extensions. Tiki is community-managed, and open development is pursued by the Tiki Software Community Association, a non-profit corporation. The Tiki project values and facilitates the participation of its coders, power users, and other collaborators, and welcomes anyone who is interested to join us. This is Tiki's public Git repository, for receiving merge requests. When unsure which branch to use see https://dev.tiki.org/Where-To-Commit

CVE History

CVEPublishedCVSS v3CVSS v2
9.9 CRITICAL

wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3.

6.1 MEDIUM4.3 MEDIUM

Tiki before 21.2 allows XSS because [\s\/"\'] is not properly considered in lib/core/TikiFilter/PreventXss.php.