CVE-2016-4056

2017-01-2321:59:01

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

Cross-site scripting (XSS) vulnerability in the Backend component in TYPO3 6.2.x before 6.2.19 allows remote attackers to inject arbitrary web script or HTML via the module parameter when creating a bookmark.

CPENameOperatorVersion
bootstrap_packageeqTYPO3_6-2-0beta1
bootstrap_packageeqTYPO3_6-2-0beta6
bootstrap_packageeqTYPO3_6-1-0rc1
bootstrap_packageeq6.2.6
bootstrap_packageeqTYPO3_6-2-0beta2
bootstrap_packageeqTYPO3_6-2-0beta7
bootstrap_packageeqTYPO3_6-2-0alpha1
bootstrap_packageeq6.2.5
bootstrap_packageeqTYPO3_6-2-0rc1
bootstrap_packageeq6.2.1

Name	Operator	Version
bootstrap_package	eq	TYPO3_6-2-0beta1
bootstrap_package	eq	TYPO3_6-2-0beta6
bootstrap_package	eq	TYPO3_6-1-0rc1
bootstrap_package	eq	6.2.6
bootstrap_package	eq	TYPO3_6-2-0beta2
bootstrap_package	eq	TYPO3_6-2-0beta7
bootstrap_package	eq	TYPO3_6-2-0alpha1
bootstrap_package	eq	6.2.5
bootstrap_package	eq	TYPO3_6-2-0rc1
bootstrap_package	eq	6.2.1