Lucene search

K
githubGitHub Advisory DatabaseGHSA-94C2-G68F-9R98
HistoryMay 17, 2022 - 1:43 a.m.

Typo3 API XSS Vulnerability

2022-05-1701:43:49
CWE-79
GitHub Advisory Database
github.com
5

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before 4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks via certain HTML5 JavaScript events.

CPE configuration

Vulners
typo3typo3Range<4.7.4
OR
typo3typo3Range<4.6.12
OR
typo3typo3Range<4.5.19

6.1 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%