EUVD-2022-5334

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

XSS vulnerability in TYPO3 Flow allows remote attackers to inject scripts via errorAction method input

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2013-7082	21 Dec 201300:00	–	cve
Cvelist	CVE-2013-7082	21 Dec 201300:00	–	cvelist
Friends Of PHP	Cross-Site Scripting in TYPO3 Flow	10 Dec 201311:47	–	friendsofphp
Friends Of PHP	Cross-Site Scripting in TYPO3 Flow	10 Dec 201311:47	–	friendsofphp
Github Security Blog	TYPO3 Flow Cross-site scripting (XSS) vulnerability	17 May 202201:29	–	github
NVD	CVE-2013-7082	21 Dec 201300:55	–	nvd
OSV	GHSA-VC74-C4M6-9979 TYPO3 Flow Cross-site scripting (XSS) vulnerability	17 May 202201:29	–	osv
OSV	UBUNTU-CVE-2013-7082	21 Dec 201300:55	–	osv
Prion	Cross site scripting	21 Dec 201300:55	–	prion
UbuntuCve	CVE-2013-7082	21 Dec 201300:55	–	ubuntucve

[
  {
    "enisaIdVendor": [
      {
        "id": "a3eb194b-980a-3733-8ed7-67752a6be592",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a6e9d627-840b-3848-98a2-f5077eb6dd7a",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2013-7082
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/89614
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/neos/flow/CVE-2013-7082.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/typo3/flow/CVE-2013-7082.yaml
neos	www.neos.io/blog/flow-sa-2013-001.html
osvdb	www.osvdb.org/100825
secunia	www.secunia.com/advisories/55996
typo3	www.typo3.org/teams/security/security-bulletins/typo3-flow/typo3-flow-sa-2013-001

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

EPSS0.00309

xss vulnerability typo3 flow remote attackers script injection erroraction method