Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47310

HistoryJun 03, 2024 - 7:00 a.m.

Cross Site Scripting (XSS)

2024-06-0307:00:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

typo3

cms-core

vulnerability

cross-site scripting

unencoded user input

frontend forms

6.7 Medium

AI Score

Confidence

High

typo3/cms-core is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a failure to properly encode user input in frontend forms handled by the form framework, allowing malicious users to inject and execute arbitrary JavaScript code in the context of other users’ browsers.

6.7 Medium

AI Score

Confidence

High