Unscored severity · published Oct 1, 2012
CVE-2011-4551
Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5 allows remote attackers to inject arbitrary web script or…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in tiki-cookie-jar.php in TikiWiki CMS/Groupware before 8.2 and LTS before 6.5 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tikiwiki Cms/groupware · Tiki
through 8.1; 2.2; 3.0; 3.1; 3.2; 3.3; +18 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-4551
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-4551
Vendor Advisory
http://info.tiki.org/article183-Tiki-Wiki-CMS-Groupware-8-2-and-6-5LTS-Security-Patches-Available
Vendor Advisory
http://secunia.com/advisories/47278
www.infoserve.de
http://www.infoserve.de/system/files/advisories/INFOSERVE-ADV2011-07.txt
www.osvdb.org
http://www.osvdb.org/77966
More from Tikiwiki Cms/groupware
9.8
CVE-2025-34111
Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE
9.8
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
9.8
CVE-2012-0911
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to…
8.8
CVE-2020-29254
TikiWiki 21.2 allows templates to be edited without CSRF protection
8.8
CVE-2010-4241
Tiki Wiki CMS Groupware 5.2 has CSRF