Lucene search

K
osvGoogleOSV:GHSA-3W22-WRWX-2R75
HistoryMay 14, 2022 - 3:25 a.m.

Typo3 XSS Vulnerability

2022-05-1403:25:24
Google
osv.dev
4
typo3
xss
vulnerability
page module
global variables
installation process

EPSS

0.001

Percentile

32.3%

The page module in TYPO3 before 8.7.11 has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.

EPSS

0.001

Percentile

32.3%

Related for OSV:GHSA-3W22-WRWX-2R75