Tiki — Vulnerabilities & Security Advisories 3

Tiki is a web-based collaborative platform used for content management, groupware, and building online communities. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting (XSS) flaws, and privilege escalation issues, particularly in versions prior to 2020. The platform's security posture has improved over time, but its complex architecture and extensive feature set continue to present potential attack surfaces. While no major public security incidents have been widely documented, the three CVEs on record highlight persistent concerns around input validation and access control, particularly in older deployments that remain unpatched.