CVE-2023-22850

HIGH CVSS: 8.8 Published: 2023-01-14 Modified: 2026-06-17

Description

Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an unserialize call.

Affected Platforms

Tiki Tiki

Weakness Type

CWE-502, CWE-502

References