CVE-2011-4336: Tiki Tikiwiki Cms/groupware

Medium severity, CVSS 6.1. EPSS: 7.7% chance of exploitation in the next 30 days.

Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.

Affected products

• Tiki Tikiwiki Cms/groupware: up to and including 7.0

Published 2020-01-15. Last modified 2026-06-16.