Description

wikiplugin_includetpl in lib/wiki-plugins/wikiplugin_includetpl.php in Tiki before 28.3 mishandles input to an eval. The fixed versions are 21.12, 24.8, 27.2, and 28.3.

INFO

Published Date :

2025-04-09T00:00:00.000Z

Last Modified :

2025-11-03T19:53:30.985Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-32461 vulnerability.

Vendors Products
Tiki
  • Tiki
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-32461.

URL Resource
http://seclists.org/fulldisclosure/2025/Jul/11 cve-icon
https://gitlab.com/tikiwiki/tiki/-/commit/406bea4f6c379a23903ecfd55e538d90fd669ab0 cve-icon cve-icon
https://gitlab.com/tikiwiki/tiki/-/commit/801ed912390c2aa6caf12b7b953e200f5d4bc0b1 cve-icon cve-icon
https://gitlab.com/tikiwiki/tiki/-/commit/9ffb4ab21bd86837370666ecd6afd868f3d7877a cve-icon cve-icon
https://gitlab.com/tikiwiki/tiki/-/commit/be8dc1aa220fbceb07a7a5dc36416243afccd358 cve-icon cve-icon
https://gitlab.com/tikiwiki/tiki/-/commit/f3f36c1ac702479209acfcaec5789d2fd1f996bc cve-icon cve-icon
https://tiki.org/article517 cve-icon cve-icon
https://tiki.org/article518 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact