Lucene search
Veracode Vulnerability DatabaseVERACODE:38871HistoryJan 15, 2023 - 9:48 p.m.
Cross-site Scripting (XSS)
2023-01-1521:48:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
innologi
typo3-appointments
cross-site scripting
xss
unescaped special characters
formfield values
software
0.001 Low
EPSS
Percentile
38.0%
innologi/typo3-appointments is vulnerable to cross-site scripting (XSS) attacks. The library does not properly escape the special characters before it outputs to the front-end, allowing an attacker to inject and execute malicious JavaScript via various formfield values.
| CPE | Name | Operator | Version |
|---|---|---|---|
| innologi/typo3-appointments | le | 2.0.5 | |
| innologi/typo3-appointments | le | 2.0.5 |
Related
prion
prion
Cross site scripting
2023-01-04 10:15:00
osv
osv
typo3-appointments vulnerable to Cross-site Scripting
2023-01-04 12:30:29
CVE-2019-25094
2023-01-04 10:15:10
cve
cve
CVE-2019-25094
2023-01-04 10:15:10
cvelist
cvelist
nvd
nvd
CVE-2019-25094
2023-01-04 10:15:10
github
github
typo3-appointments vulnerable to Cross-site Scripting
2023-01-04 12:30:29