AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2004-1926

HIGH · CVSS 7.5 EPSS 7.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-04-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2004-1926
Severity
HIGH
CVSS
7.5
EPSS
7.47%

Original Filing — NVD Description

Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in a Directory/Add Site operation.