Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47337

HistoryJun 04, 2024 - 5:45 a.m.

Cross-Site Scripting (XSS)

2024-06-0405:45:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1

cross-site scripting

typo3

cms-core

feuser template

frontend rendering

attackers

6.4 Medium

AI Score

Confidence

High

typo3/cms-core is vulnerable to Cross-Site Scripting (XSS). This vulnerability is due to inadequate input encoding in the FEUSER_[fieldName] template patterns, utilized by the felogin system extension for regular frontend rendering, which allows an attackers to inject malicious scripts into the frontend.

6.4 Medium

AI Score

Confidence

High