CVE-2014-8658

Published: Nov 6, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.action.

Affected (26)

Products: Refinedwiki: Refinedwiki Original Theme

Refinedwiki

1 product

Refinedwiki Original Theme

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Refinedwiki Refinedwiki Original Theme	Version 3.5.10
Refinedwiki Refinedwiki Original Theme	Version 3.5.11
Refinedwiki Refinedwiki Original Theme	Version 3.5.12
Refinedwiki Refinedwiki Original Theme	Version 3.5.13
Refinedwiki Refinedwiki Original Theme	Version 3.5.1
Refinedwiki Refinedwiki Original Theme	Version 3.5.2
Refinedwiki Refinedwiki Original Theme	Version 3.5.3
Refinedwiki Refinedwiki Original Theme	Version 3.5.4
Refinedwiki Refinedwiki Original Theme	Version 3.5.5
Refinedwiki Refinedwiki Original Theme	Version 3.5.6
Refinedwiki Refinedwiki Original Theme	Version 3.5.7
Refinedwiki Refinedwiki Original Theme	Version 3.5.8
Refinedwiki Refinedwiki Original Theme	Version 3.5.9
Refinedwiki Refinedwiki Original Theme	Version 3.5
Refinedwiki Refinedwiki Original Theme	Version 4.0.10
Refinedwiki Refinedwiki Original Theme	Version 4.0.11
Refinedwiki Refinedwiki Original Theme	Version 4.0.1
Refinedwiki Refinedwiki Original Theme	Version 4.0.2
Refinedwiki Refinedwiki Original Theme	Version 4.0.3
Refinedwiki Refinedwiki Original Theme	Version 4.0.4
Refinedwiki Refinedwiki Original Theme	Version 4.0.5
Refinedwiki Refinedwiki Original Theme	Version 4.0.6
Refinedwiki Refinedwiki Original Theme	Version 4.0.7
Refinedwiki Refinedwiki Original Theme	Version 4.0.8
Refinedwiki Refinedwiki Original Theme	Version 4.0.9
Refinedwiki Refinedwiki Original Theme	Version 4.0