Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47343

HistoryJun 04, 2024 - 6:10 a.m.

Cross-Site Scripting (XSS)

2024-06-0406:10:59

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

typo3

user input encoding

notifications

modal windows

backend

arbitrary javascript

browser

vulnerability

6.7 Medium

AI Score

Confidence

High

typo3/cms-core is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to improper user input encoding of notifications shown in modal windows within the TYPO3 backend, which allows an attacker with a valid backend user account to execute arbitrary JavaScript in a users browser.

6.7 Medium

AI Score

Confidence

High