TYPO3-XSS-POC

TYPO3-XSS-POC Typo3 -v9.1.0 Cross Site Scripting XSS persistente. Numero CVE assegnato: CVE-2018-6905...

CVE-2018-6905

CVE-2018-6905 affects TYPO3 page module up to versions prior to 8.7.11 and 9.1.0, enabling cross-site scripting via the global setting TYPO3_CONF_VARS[SYS][sitename] when an admin enters a crafted site name during installation. The vulnerability is a client-controlled reflection in the site name ...