Unrated
Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unserialize call.
CVE-2023-22851
First seen on SecPulse
References
- advisory github.com
- advisory nvd.nist.gov
- web karmainsecurity.com
- web tiki.org