CVE-2014-8658

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

Cross-site scripting (XSS) vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.action.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Nov 6, 2014
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-86595.0Directory traversal vulnerability in SAP Environment, Health, and Safety allows remote attackers to read arbitrary files via unspecified vecCVE-2014-86607.2SAP Document Management Services allows local users to execute arbitrary commands via unspecified vectors.CVE-2014-866110.0The SAP CRM Internet Sales module allows remote attackers to execute arbitrary commands via unspecified vectors.CVE-2014-86627.8Unspecified vulnerability in SAP Payroll Process allows remote attackers to cause a denial of service via vectors related to session handlinCVE-2014-86637.5SQL injection vulnerability in Data Basis (BW-WHM-DBA) in SAP NetWeaver Business Warehouse allows remote attackers to execute arbitrary SQL CVE-2014-86647.5SQL injection vulnerability in Product Safety (EHS-SAF) component in SAP Environment, Health, and Safety Management allows remote attackers CVE-2014-86655.0The SAP Business Intelligence Development Workbench allows remote attackers to obtain sensitive information by reading unspecified files.CVE-2014-86665.0The User & Server configuration, InfoView refresh, user rights (BI-BIP-ADM) component in SAP Business Intellignece allows remote attackers tCVE-2014-86674.3Cross-site scripting (XSS) vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject arbitrary web script CVE-2014-86687.5SQL injection vulnerability in SAP Contract Accounting allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2014-866910.0The SAP Promotion Guidelines (CRM-MKT-MPL-TPM-PPG) module for SAP CRM allows remote attackers to execute arbitrary code via unspecified vectCVE-2014-86705.8Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishi
CVE-2014-8658: Medium severity, CVSS 4.0 | Vulnix