← Back to browse · API

CVE-2025-32461

Severity
CRITICAL
CVSS
9.9
EPSS
0.00837
Risk score
39.89
CISA KEV
No
PoC
No
Published
2025-04-09
Modified
2025-11-03
First seen
2026-08-07
Aliases
EUVD-2025-10417, GHSA-V676-FW8H-J3J9
Products
Tiki:Tiki 0 <21.12, Tiki:Tiki 22 <24.8, Tiki:Tiki 25 <27.2, Tiki:Tiki 28 <28.3
Sources
euvd EUVD-2025-10417

Description

wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3.

References