Unscored severity · published Nov 6, 2013
CVE-2013-4714
Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TC
Tikiwiki Cms/groupware · Tiki
6.8; 6.9; 6.10; 6.11; 6.12; 9.0; +18 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4714
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4714
info.tiki.org
http://info.tiki.org/article221-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware
jvn.jp
http://jvn.jp/en/jp/JVN81813850/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000099
More from Tikiwiki Cms/groupware
9.8
CVE-2025-34111
An unauthenticated arbitrary file upload vulnerability exists in Tiki Wiki CMS Groupware version 15.1 and earlier via the ELFinder component's default connector…
9.8
CVE-2010-4239
Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
9.8
CVE-2012-0911
TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to…
8.8
CVE-2020-29254
TikiWiki 21.2 allows templates to be edited without CSRF protection
8.8
CVE-2010-4241
Tiki Wiki CMS Groupware 5.2 has CSRF