Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47367

HistoryJun 05, 2024 - 8:15 a.m.

Cross-site Scripting (XSS)

2024-06-0508:15:54

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

1

cross-site scripting

vulnerability

improper encoding

editor input

search result view

authenticated editors

arbitrary html

6.4 Medium

AI Score

Confidence

High

typo3/cms is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to improper encoding of editor input in the search result view, allowing authenticated editors to inject arbitrary HTML.

6.4 Medium

AI Score

Confidence

High