CVE-2023-22850: Tiki

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call.

Affected products

• Tiki Tiki: before 24.1 (fixed in 24.1)

Published 2023-01-14. Last modified 2026-06-17.