Cross site scripting

2013-08-2018:14:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.3%

JSON

Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
static_info_tablesle2.0.6
static_info_tableseq1.0.0
static_info_tableseq1.1.0
static_info_tableseq1.1.1
static_info_tableseq1.2.0
static_info_tableseq1.3.0
static_info_tableseq1.4.0
static_info_tableseq1.5.0
static_info_tableseq1.6.0
static_info_tableseq1.7.0

Name	Operator	Version
static_info_tables	le	2.0.6
static_info_tables	eq	1.0.0
static_info_tables	eq	1.1.0
static_info_tables	eq	1.1.1
static_info_tables	eq	1.2.0
static_info_tables	eq	1.3.0
static_info_tables	eq	1.4.0
static_info_tables	eq	1.5.0
static_info_tables	eq	1.6.0
static_info_tables	eq	1.7.0

Rows per page:

1-10 of 171

References

osvdb.org/90414

secunia.com/advisories/52283

typo3.org/extensions/repository/view/static_info_tables

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-004/

www.securityfocus.com/bid/58056

exchange.xforce.ibmcloud.com/vulnerabilities/82212