Cross Site Scripting (XSS) exists in Tiki prior to 12.13, 15.6, 17.2, and 18.1.
tiki tikiwiki cms\\/groupware
tiki tikiwiki cms\\/groupware 18.0