CVE-2025-34111 | Tiki Wiki CMS Groupware up to 15.1 ELFinder Component connector.minimal.php unrestricted upload (EDB-40091)

A vulnerability was found in Tiki Wiki CMS Groupware up to 15.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file connector.minimal.php of the component ELFinder Component. The manipulation leads to unrestricted upload.

This vulnerability is known as CVE-2025-34111. The attack can be launched remotely. Furthermore, there is an exploit available.