Cross-Site Scripting (XSS)

2024-05-1509:53:09

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

typo3

cms

input sanitization

user-generated content

exploitation

malicious scripts

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

6.5

Confidence

High

EPSS

Percentile

15.5%

JSON

typo3/cms-core is vulnerable to Cross-Site Scripting (XSS). The vulnerability is caused due to a lack of proper input sanitization and encoding of user-generated content in the form module. Exploiting this flaw enables attackers to inject and execute malicious scripts.