What is GHSA-h7jc-pg2r-mqj4?

GHSA-h7jc-pg2r-mqj4 is a security advisory published by GitHub Security Advisories with Medium severity. Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability

Which CVE IDs does GHSA-h7jc-pg2r-mqj4 cover?

GHSA-h7jc-pg2r-mqj4 covers the following CVE IDs: CVE-2013-4714. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h7jc-pg2r-mqj4?

GHSA-h7jc-pg2r-mqj4 has a CVSS v3 base score of 4.7, published by GitHub Security Advisories.

Which products are affected by GHSA-h7jc-pg2r-mqj4?

GHSA-h7jc-pg2r-mqj4 affects 4 products, including: composer/tikiwiki/tiki-manager:\u003e= 6.0, \u003c 6.13; composer/tikiwiki/tiki-manager:\u003e= 9.0, \u003c 9.7; composer/tikiwiki/tiki-manager:\u003e= 10.0, \u003c 10.4; composer/tikiwiki/tiki-manager:\u003e= 11.0, \u003c 11.1.

GHSA-h7jc-pg2r-mqj4MediumCVSS 4.7

Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

August 29, 2023

🔗 CVE IDs covered (1)

CVE-2013-4714 →

📋 Description

Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products4

composer/tikiwiki/tiki-manager:>= 6.0, < 6.13
composer/tikiwiki/tiki-manager:>= 9.0, < 9.7
composer/tikiwiki/tiki-manager:>= 10.0, < 10.4
composer/tikiwiki/tiki-manager:>= 11.0, < 11.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2013-4714
http://info.tiki.org/article221-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware
http://jvn.jp/en/jp/JVN81813850/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000099
https://tiki.org/article401-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware
https://github.com/advisories/GHSA-h7jc-pg2r-mqj4