CVE-2011-4551

MEDIUM 4.3CVE-2011-4551 · Published 01/10/2012 · updated 16/06/2026

In short

CVE-2011-4551 is a MEDIUM (CVSS 4.3) vulnerability affecting tikiwiki cms/groupware (tiki).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tikiwiki cms/groupware tiki	`= 2.2= 3.0= 3.1= 3.2= 3.3= 3.4= 3.5= 4= 4.0= 4.1= 4.2= 5.0= 5.1= 5.2= 5.3= 6.0= 6.1= 6.2= 7.0= 7.1= 7.2= 8.0≤ 6.3≤ 8.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters.

References

info.tiki.org/article183-Tiki-Wiki-CMS-Groupware-8-2-and-6-5LTS-Security-Patches-Available · Vendor Advisory
secunia.com/advisories/47278 · Vendor Advisory
infoserve.de/system/files/advisories/INFOSERVE-ADV2011-07.txt
osvdb.org/77966

More vulnerabilities in tikiwiki cms/groupware

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tikiwiki cms/groupware

tiki

= 2.2= 3.0= 3.1= 3.2= 3.3= 3.4= 3.5= 4= 4.0= 4.1= 4.2= 5.0= 5.1= 5.2= 5.3= 6.0= 6.1= 6.2= 7.0= 7.1= 7.2= 8.0≤ 6.3≤ 8.1

No fix yet

More vulnerabilities in tikiwiki cms/groupware

See all →