Cross site request forgery (csrf)

2020-07-0714:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.

CPENameOperatorVersion
mm_forumle1.9.5

CPE	Name	Operator	Version
	mm_forum	le	1.9.5

References

typo3.org/help/security-advisories

typo3.org/security/advisory/typo3-ext-sa-2020-013