Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47387
HistoryJun 06, 2024 - 6:42 a.m.

Cross-Site Scripting

2024-06-0606:42:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
cross-site scripting
typo3/cms
vulnerability
user input
improper sanitization
css styled content component
authenticated users
arbitrary html
javascript

6.7 Medium

AI Score

Confidence

High

typo3/cms is vulnerable to Cross-Site Scripting. The vulnerability is due to improper sanitization of user input in the CSS styled content component, which allows an authenticated users to inject arbitrary HTML or JavaScript.

6.7 Medium

AI Score

Confidence

High