Skip to content
OpenAdvisories
Medium · 4.7 CVE-2013-4714 EUVD-2022-4098GHSA-h7jc-pg2r-mqj4

Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability

Published Nov 6, 2013 · Updated Sep 16, 2024 · Assigned by jpcert

Package: tikiwiki/tiki-manager Ecosystem: Packagist

Description

Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist tikiwiki/tiki-manager >= 6.0, < 6.13 6.13 GHSA-h7jc-pg2r-mqj4
Packagist tikiwiki/tiki-manager >= 9.0, < 9.7 9.7 GHSA-h7jc-pg2r-mqj4
Packagist tikiwiki/tiki-manager >= 10.0, < 10.4 10.4 GHSA-h7jc-pg2r-mqj4
Packagist tikiwiki/tiki-manager >= 11.0, < 11.1 11.1 GHSA-h7jc-pg2r-mqj4

References