Cross-site Scripting (XSS)

2017-07-2706:29:25

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

49.7%

JSON

Typo3 CMS is vulnerable to cross-site scripting (XSS) attacks. A malicious user can inject and execute arbitrary web script when installing the TER extension by passing a json request to the application.

CPENameOperatorVersion
typo3/cmseq7.6.0
typo3/cmsle6.2.15

CPE	Name	Operator	Version
	typo3/cms	eq	7.6.0
	typo3/cms	le	6.2.15

References

typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2015-010/

0.001 Low

EPSS

Percentile

49.7%

JSON

Related for VERACODE:4749