CVE-2005-3528: Tiki Tikiwiki Cms/groupware

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in tiki-view_forum_thread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topics_offset parameter.

Affected products

• Tiki Tikiwiki Cms/groupware: version 1.9.0 only; version 1.9.1 only; version 1.9.2 only

Published 2005-11-20. Last modified 2026-06-16.