Lucene search
+L

4 matches found

Kitploit
Kitploit
•added 2026/09/26 9:48 p.m.•23 views

TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

XSS almacenado exploit en TYPO3 HTML Sanitizer CVE-2023-47125 Descripción Las instrucciones de procesamiento del DOM no se manejan correctamente. Esto permite eludir el mecanismo de cross-site scripting de typo3/html-sanitizer. Versiones vulnerables = 1.0.0, = 2.0.0,...

6.1CVSS6.6AI score0.00574EPSS
SaveExploits1
OSV
OSV
•added 2023/11/14 8:07 p.m.•34 views

CVE-2023-47125 By-passing Cross-Site Scripting Protection in HTML Sanitizer

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versio...

4.7CVSS5.8AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•23 views

TYPO3 Security Vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 that stems from DOM processing instructions not being handled correctly, allowing bypassing the cross-site scripting mechanism of...

6.1CVSS6.2AI score0.00574EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•2 views

CVE-2023-47125: Improper Neutralization of Input During Web Page Generation

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versio...

6.1CVSS5.9AI score0.00574EPSS
SaveExploits1References2
Rows per page
Query Builder