Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47342

HistoryJun 04, 2024 - 5:52 a.m.

Cross-Site Scripting (XSS)

2024-06-0405:52:22

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4

cross-site scripting

typo3/cms-core

vulnerability

fluid viewhelpers

user input encoding

malicious scripts

browser

AI Score

6.6

Confidence

High

typo3/cms-core is vulnerable to Cross-Site scripting (XSS). The vulnerability is caused by improper user input encoding when using templates in the built-in Fluid ViewHelpers, which allows an attacker to inject malicious scripts into the browser.

AI Score

6.6

Confidence

High