Lucene search
Veracode Vulnerability DatabaseVERACODE:25833HistoryJul 08, 2020 - 4:10 a.m.
Cross-Site Scripting (XSS)
2020-07-0804:10:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
19.4%
teaminmedias-pluswerk/ke_search (aka) Faceted Search extension of Typo3 is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via parameters such as content,abstract,message,tag, title in the backend module controller.
| CPE | Name | Operator | Version |
|---|---|---|---|
| teaminmedias-pluswerk/ke_search | le | 3.1.3 | |
| teaminmedias-pluswerk/ke_search | le | 2.8.2 |
Related
typo3
typo3
Cross-Site Scripting in extension "Faceted Search" (ke_search)
2020-07-07 00:00:00
github
github
ke_search for Typo3 XSS Vulnerability
2022-05-24 17:22:32
osv
osv
ke_search for Typo3 XSS Vulnerability
2022-05-24 17:22:32
prion
prion
Cross site scripting
2020-07-07 14:15:00
cve
cve
CVE-2020-15517
2020-07-07 14:15:11
cvelist
cvelist
CVE-2020-15517
2020-07-07 13:44:23
nvd
nvd
CVE-2020-15517
2020-07-07 14:15:11