CVE-2013-4714

Published: Nov 6, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (24)

Products: Tiki: Tikiwiki Cms/groupware

Tiki

1 product

Tikiwiki Cms/groupware

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Tiki Tikiwiki Cms/groupware	Version 10.0
Tiki Tikiwiki Cms/groupware	Version 10.0 alpha
Tiki Tikiwiki Cms/groupware	Version 10.0 beta
Tiki Tikiwiki Cms/groupware	Version 10.1
Tiki Tikiwiki Cms/groupware	Version 10.2
Tiki Tikiwiki Cms/groupware	Version 10.3
Tiki Tikiwiki Cms/groupware	Version 11.0
Tiki Tikiwiki Cms/groupware	Version 11.0 beta
Tiki Tikiwiki Cms/groupware	Version 6.10
Tiki Tikiwiki Cms/groupware	Version 6.11
Tiki Tikiwiki Cms/groupware	Version 6.12
Tiki Tikiwiki Cms/groupware	Version 6.8
Tiki Tikiwiki Cms/groupware	Version 6.9
Tiki Tikiwiki Cms/groupware	Version 9.0
Tiki Tikiwiki Cms/groupware	Version 9.0 alpha
Tiki Tikiwiki Cms/groupware	Version 9.0 beta2
Tiki Tikiwiki Cms/groupware	Version 9.0 beta
Tiki Tikiwiki Cms/groupware	Version 9.1
Tiki Tikiwiki Cms/groupware	Version 9.2
Tiki Tikiwiki Cms/groupware	Version 9.2 beta1
Tiki Tikiwiki Cms/groupware	Version 9.3
Tiki Tikiwiki Cms/groupware	Version 9.4
Tiki Tikiwiki Cms/groupware	Version 9.5
Tiki Tikiwiki Cms/groupware	Version 9.6