Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25414
HistoryMay 14, 2020 - 7:12 a.m.

Cross-site Scripting (XSS)

2020-05-1407:12:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

21.3%

typo3/cms-core is vulnerable to cross-site scripting (XSS). The vulnerability exists as decoded entities generated by the typolink functionality were not encoded back to HTML before it gets rendered.

0.001 Low

EPSS

Percentile

21.3%