Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47371

HistoryJun 05, 2024 - 9:44 a.m.

Cross-site Scripting (XSS)

2024-06-0509:44:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

typo3/cms

vulnerable

improper encoding

user input

html

javascript

authenticated editors

6.2 Medium

AI Score

Confidence

High

typo3/cms is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to improper encoding of user input, allowing authenticated editors to inject arbitrary HTML or JavaScript.

6.2 Medium

AI Score

Confidence

High