CVE-2017-9145: Tiki Tikiwiki Cms/groupware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.

Affected products

• Tiki Tikiwiki Cms/groupware: version 12.0 only; version 12.1 only; version 12.2 only; version 12.3 only; version 12.4 only; version 12.5 only; …

Published 2017-06-26. Last modified 2026-06-17.