Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/17 9:49 p.m.•29 views

TYPO3-HTML-Sanitizer-XSS-CVE-2023-47125

Stored XSS exploit in TYPO3 HTML Sanitizer CVE-2023-47125 Description DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. Vuln versions = 1.0.0, = 2.0.0,...

6.1CVSS6.3AI score0.00574EPSS
SaveExploits1
osv_cve
osv_cve
•added 2023/11/14 8:07 p.m.•42 views

CVE-2023-47125 By-passing Cross-Site Scripting Protection in HTML Sanitizer

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versio...

4.7CVSS5.8AI score
SaveExploits0References5
Mend
Mend
•added 2023/11/14 8:07 p.m.•8 views

CVE-2023-47125

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versio...

6.1CVSS0.00574EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•30 views

TYPO3 Security Vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 that stems from DOM processing instructions not being handled correctly, allowing bypassing the cross-site scripting mechanism of...

6.1CVSS6.2AI score0.00574EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•10 views

CVE-2023-47125: Improper Neutralization of Input During Web Page Generation

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions are not handled correctly. This allows bypassing the cross-site scripting mechanism of typo3/html-sanitizer. This vulnerability has been addressed in versio...

6.1CVSS5.9AI score0.00574EPSS
SaveExploits1References2
Rows per page
Query Builder