CVE-2013-4714

Tiki Wiki CMS Groupware <6.13LTS-11.1 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Various Sources] http://info.tiki.org/article221-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware

[Third Party Advisory] http://jvn.jp/en/jp/JVN81813850/index.html

[Third Party Advisory] http://jvndb.jvn.jp/jvndb/JVNDB-2013-000099

Scores

EPSS 0.0025

EPSS Percentile 48.5%

Details

CWE

CWE-79

Status published

Products (26)

tiki/tikiwiki_cms\/groupware

... and 16 more

Published Nov 06, 2013

Tracked Since Feb 18, 2026