Cross site scripting

2013-11-0615:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

Cross-site scripting (XSS) vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
tikiwiki_cms\\/groupwareeq9.0 beta2-lts
tikiwiki_cms\\/groupwareeq10.0 alpha
tikiwiki_cms\\/groupwareeq10.2
tikiwiki_cms\\/groupwareeq10.0
tikiwiki_cms\\/groupwareeq6.10 lts
tikiwiki_cms\\/groupwareeq11.0 beta
tikiwiki_cms\\/groupwareeq6.11 lts
tikiwiki_cms\\/groupwareeq9.4 lts
tikiwiki_cms\\/groupwareeq9.0 beta-lts
tikiwiki_cms\\/groupwareeq11.0

Name	Operator	Version
tikiwiki_cms\\/groupware	eq	9.0 beta2-lts
tikiwiki_cms\\/groupware	eq	10.0 alpha
tikiwiki_cms\\/groupware	eq	10.2
tikiwiki_cms\\/groupware	eq	10.0
tikiwiki_cms\\/groupware	eq	6.10 lts
tikiwiki_cms\\/groupware	eq	11.0 beta
tikiwiki_cms\\/groupware	eq	6.11 lts
tikiwiki_cms\\/groupware	eq	9.4 lts
tikiwiki_cms\\/groupware	eq	9.0 beta-lts
tikiwiki_cms\\/groupware	eq	11.0