Lucene search

K
osvGoogleOSV:CVE-2018-6905
HistoryApr 08, 2018 - 5:29 p.m.

CVE-2018-6905

2018-04-0817:29:00
Google
osv.dev
8

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

32.3%

The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS[‘TYPO3_CONF_VARS’][‘SYS’][‘sitename’], as demonstrated by an admin entering a crafted site name during the installation process.

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

32.3%