CVE-2013-4714: XSS
Published Nov 6, 2013
·Updated
Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
28 affected componentsFixes available
composer/tikiwiki/tiki-manager>=11.0<11.1
11.1
composer/tikiwiki/tiki-manager>=10.0<10.4
10.4
composer/tikiwiki/tiki-manager>=9.0<9.7
9.7
composer/tikiwiki/tiki-manager>=6.0<6.13
6.13
Tiki Wiki CMS Groupware=6.8
Tiki Wiki CMS Groupware=6.9
Tiki Wiki CMS Groupware=6.10
Tiki Wiki CMS Groupware=6.11
Tiki Wiki CMS Groupware=6.12
Tiki Wiki CMS Groupware=9.0
Tiki Wiki CMS Groupware=9.0-alpha
Tiki Wiki CMS Groupware=9.0-beta
Tiki Wiki CMS Groupware=9.0-beta2
Tiki Wiki CMS Groupware=9.1
Tiki Wiki CMS Groupware=9.2
Tiki Wiki CMS Groupware=9.2-beta1
Tiki Wiki CMS Groupware=9.3
Tiki Wiki CMS Groupware=9.4
Tiki Wiki CMS Groupware=9.5
Tiki Wiki CMS Groupware=9.6
Tiki Wiki CMS Groupware=10.0
Tiki Wiki CMS Groupware=10.0-alpha
Tiki Wiki CMS Groupware=10.0-beta
Tiki Wiki CMS Groupware=10.1
Tiki Wiki CMS Groupware=10.2
Tiki Wiki CMS Groupware=10.3
Tiki Wiki CMS Groupware=11.0
Tiki Wiki CMS Groupware=11.0-beta
Event History
Nov 6, 2013
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
May 17, 2022
Advisory Published
04:58 AM
Frequently Asked Questions
1
What is the severity of CVE-2013-4714?
CVE-2013-4714 has a medium severity rating due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2013-4714?
To fix CVE-2013-4714, upgrade Tiki Wiki CMS Groupware to version 6.13, 9.7, 10.4, or 11.1 or later.
3
Which versions are affected by CVE-2013-4714?
CVE-2013-4714 affects Tiki Wiki CMS Groupware versions prior to 6.13, 9.7, 10.4, and 11.1.
4
What type of vulnerability is CVE-2013-4714?
CVE-2013-4714 is a cross-site scripting (XSS) vulnerability that allows for arbitrary script injection.
5
Who can exploit CVE-2013-4714?
CVE-2013-4714 can be exploited by remote attackers targeting vulnerable installations of Tiki Wiki CMS Groupware.