{"action":"Upgrade tikiwiki/tiki-manager to 6.13 or later.","affected":[{"fixed":"6.13","introduced":"6.0"},{"fixed":"9.7","introduced":"9.0"},{"fixed":"10.4","introduced":"10.0"},{"fixed":"11.1","introduced":"11.0"}],"component":"tikiwiki/tiki-manager","cve_ids":["CVE-2013-4714"],"ecosystem":"Packagist","epss":0.01156,"exploited":false,"fixed_versions":["6.13","9.7","10.4","11.1"],"ghsa_id":"GHSA-h7jc-pg2r-mqj4","id":"tcs_01M5KF3F763S34NQJSAMGMVC6H","modified_at":"2023-11-08T03:57:24.330350Z","published_at":"2022-05-17T04:58:31Z","references":["https://osv.dev/vulnerability/GHSA-h7jc-pg2r-mqj4","https://nvd.nist.gov/vuln/detail/CVE-2013-4714","https://github.com/TikiWiki/tiki-manager","https://tiki.org/article401-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware","http://info.tiki.org/article221-New-Versions-of-all-supported-versions-of-Tiki-Wiki-CMS-Groupware","http://jvn.jp/en/jp/JVN81813850/index.html","http://jvndb.jvn.jp/jvndb/JVNDB-2013-000099"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-h7jc-pg2r-mqj4","url":"https://osv.dev/vulnerability/GHSA-h7jc-pg2r-mqj4"}],"summary":"Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability"}