high8.8
CVE-2023-22853
Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval.
Impact
Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection because of an eval.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tiki | Tiki | before 24.1 |