Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29804
HistoryMar 24, 2021 - 3:32 a.m.

Cross-site Scripting (XSS)

2021-03-2403:32:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
xss
typo3
cms-core
formmanager
viewmodel.js

EPSS

0.001

Percentile

26.2%

typo3/cms-core is vulnerable to cross-site scripting (XSS). The vulnerability exists through the lack of sanitization on the values of settings which are rendered through FormMananager/ViewModel.js.

EPSS

0.001

Percentile

26.2%