CVE-2024-51508: Tiki

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Index.

Affected products

• Tiki Tiki: up to and including 27.0

Published 2024-10-28. Last modified 2026-06-17.