CVE-2014-8658
refinedwiki refinedwiki original theme: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.action.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- refinedwiki:refinedwiki_original_theme
References
- http://demo.refinedwiki.com/display/rwot/Version+4.0.12
- http://packetstormsecurity.com/files/128907/Confluence-RefinedWiki-Original-Theme-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2014/Oct/126
- http://www.securityfocus.com/archive/1/533845/100/0/threaded
- http://www.securityfocus.com/bid/70798