Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability

MEDIO 4.3CVE-2013-4714 · GHSA-h7jc-pg2r-mqj4 · Published 06/11/2013 · updated 16/06/2026

En resumen

CVE-2013-4714 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a tikiwiki/tiki-manager, tikiwiki cms/groupware (tiki).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 67.0% de las vulnerabilidades.
Solución: actualizar a 10.4, 11.1, 6.13, 9.7 o posterior.

Package	Affected versions	Patched versions
tikiwiki/tiki-manager Packagist	`≥ 10.0, < 10.4≥ 11.0, < 11.1≥ 6.0, < 6.13≥ 9.0, < 9.7`	`10.411.16.139.7`
tikiwiki cms/groupware tiki	`= 10.0= 10.1= 10.2= 10.3= 11.0= 6.10= 6.11= 6.12= 6.8= 6.9= 9.0= 9.1= 9.2= 9.3= 9.4= 9.5= 9.6`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2013-4714 · ADVISORY
TikiWiki/tiki-manager · PACKAGE
tiki.org/article401-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware · WEB
info.tiki.org/article221-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware · WEB
jvn.jp/en/jp/JVN81813850/index.html · WEB
jvndb.jvn.jp/jvndb/JVNDB-2013-000099 · WEB

Más vulnerabilidades de tikiwiki/tiki-manager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

tikiwiki/tiki-manager

Packagist

≥ 10.0, < 10.4≥ 11.0, < 11.1≥ 6.0, < 6.13≥ 9.0, < 9.7

10.411.16.139.7

tikiwiki cms/groupware

tiki

= 10.0= 10.1= 10.2= 10.3= 11.0= 6.10= 6.11= 6.12= 6.8= 6.9= 9.0= 9.1= 9.2= 9.3= 9.4= 9.5= 9.6

No fix yet

Description

NVD description