Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability

MITTEL 4.3CVE-2013-4714 · GHSA-h7jc-pg2r-mqj4 · Published 06/11/2013 · updated 16/06/2026

Kurz gesagt

CVE-2013-4714 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in tikiwiki/tiki-manager, tikiwiki cms/groupware (tiki).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.2%, höher als bei 67.0% aller Schwachstellen.
Abhilfe: auf 10.4, 11.1, 6.13, 9.7 oder neuer aktualisieren.

Package	Affected versions	Patched versions
tikiwiki/tiki-manager Packagist	`≥ 10.0, < 10.4≥ 11.0, < 11.1≥ 6.0, < 6.13≥ 9.0, < 9.7`	`10.411.16.139.7`
tikiwiki cms/groupware tiki	`= 10.0= 10.1= 10.2= 10.3= 11.0= 6.10= 6.11= 6.12= 6.8= 6.9= 9.0= 9.1= 9.2= 9.3= 9.4= 9.5= 9.6`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2013-4714 · ADVISORY
TikiWiki/tiki-manager · PACKAGE
tiki.org/article401-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware · WEB
info.tiki.org/article221-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware · WEB
jvn.jp/en/jp/JVN81813850/index.html · WEB
jvndb.jvn.jp/jvndb/JVNDB-2013-000099 · WEB

Weitere Schwachstellen in tikiwiki/tiki-manager

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tikiwiki/tiki-manager

Packagist

≥ 10.0, < 10.4≥ 11.0, < 11.1≥ 6.0, < 6.13≥ 9.0, < 9.7

10.411.16.139.7

tikiwiki cms/groupware

tiki

= 10.0= 10.1= 10.2= 10.3= 11.0= 6.10= 6.11= 6.12= 6.8= 6.9= 9.0= 9.1= 9.2= 9.3= 9.4= 9.5= 9.6

No fix yet

Description

NVD description