{"id":"GHSA-h7jc-pg2r-mqj4","aliases":["CVE-2013-4714"],"title":"Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.","severity":"medium","score":4.7,"published":"2022-05-17T04:58:31.000Z","modified":"2023-11-08T03:57:24.330Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"tikiwiki/tiki-manager","sources":[{"name":"OSV · GHSA-h7jc-pg2r-mqj4","url":"https://osv.dev/vulnerability/GHSA-h7jc-pg2r-mqj4"}],"ranges":[{"events":[{"introduced":"6.0"},{"fixed":"6.13"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["6.13"]},{"ecosystem":"Packagist","name":"tikiwiki/tiki-manager","sources":[{"name":"OSV · GHSA-h7jc-pg2r-mqj4","url":"https://osv.dev/vulnerability/GHSA-h7jc-pg2r-mqj4"}],"ranges":[{"events":[{"introduced":"9.0"},{"fixed":"9.7"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["9.7"]},{"ecosystem":"Packagist","name":"tikiwiki/tiki-manager","sources":[{"name":"OSV · GHSA-h7jc-pg2r-mqj4","url":"https://osv.dev/vulnerability/GHSA-h7jc-pg2r-mqj4"}],"ranges":[{"events":[{"introduced":"10.0"},{"fixed":"10.4"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["10.4"]},{"ecosystem":"Packagist","name":"tikiwiki/tiki-manager","sources":[{"name":"OSV · GHSA-h7jc-pg2r-mqj4","url":"https://osv.dev/vulnerability/GHSA-h7jc-pg2r-mqj4"}],"ranges":[{"events":[{"introduced":"11.0"},{"fixed":"11.1"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["11.1"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2013-4714","https://github.com/TikiWiki/tiki-manager","https://tiki.org/article401-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware","http://info.tiki.org/article221-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware","http://jvn.jp/en/jp/JVN81813850/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2013-000099"],"sources":[{"name":"OSV","id":"GHSA-h7jc-pg2r-mqj4","modified":"2023-11-08T03:57:24.330350Z","url":"https://osv.dev/vulnerability/GHSA-h7jc-pg2r-mqj4"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N","score":4.7}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T09:15:31.408Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}