← All advisories

High severity7.2NVD Advisory· Published Jan 14, 2023· Updated Jun 17, 2026

CVE-2023-22851

CVE-2023-22851

Description

Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unserialize call.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Tiki/Tiki3 versions
cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:tiki:tiki:*:*:*:*:*:*:*:*range: <24.2
- (no CPE)
- (no CPE)range: <24.2

Patches

Vulnerability mechanics

References

2

karmainsecurity.com/KIS-2023-04nvdExploitThird Party Advisory
tiki.org/articlesnvdVendor Advisory

News mentions

0

No linked articles in our index yet.