Lucene search
GoogleOSV:CVE-2022-31048HistoryJun 14, 2022 - 9:15 p.m.
CVE-2022-31048
2022-06-1421:15:16
Google
osv.dev
4
typo3
form designer
xss
vulnerability
fix
versions 8.7.47
9.5.34
10.4.29
11.5.11
TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit this vulnerability. TYPO3 versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11 contain a fix for the problem.
Related
friendsofphp
friendsofphp
TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework
2022-06-14 07:11:36
TYPO3-CORE-SA-2022-003: Cross-Site Scripting in Form Framework
2022-06-14 07:11:36
osv
osv
BIT-typo3-2022-31048
2024-03-06 11:09:29
Cross-Site Scripting in TYPO3's Form Framework
2022-06-17 20:55:48
openvas
openvas
TYPO3 XSS Vulnerability (TYPO3-CORE-SA-2022-003)
2022-06-15 00:00:00
github
github
Cross-Site Scripting in TYPO3's Form Framework
2022-06-17 20:55:48
nvd
nvd
CVE-2022-31048
2022-06-14 21:15:16
cve
cve
CVE-2022-31048
2022-06-14 21:15:16
veracode
veracode
Cross-site Scripting (XSS)
2022-06-15 09:27:32
prion
prion
Cross site scripting
2022-06-14 21:15:00
cvelist
cvelist
CVE-2022-31048 Cross-Site Scripting in Form Framework
2022-06-14 20:50:18