Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4748
HistoryJul 27, 2017 - 6:24 a.m.

Cross-site Scripting (XSS)

2017-07-2706:24:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.002 Low

EPSS

Percentile

52.6%

Typo3 CMS is vulnerable to cross-site scripting (XSS) attacks. The library’s flashplayer does not validate flash and image files, allowing a malicious user to embed an external flash video to inject and execute arbitrary script.

CPENameOperatorVersion
typo3/cmsle6.2.15

0.002 Low

EPSS

Percentile

52.6%