Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47574

HistoryJun 17, 2024 - 8:39 a.m.

Cross-site Scripting (XSS)

2024-06-1708:39:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2

typo3

vulnerability

cross-site scripting

xss

user input

fluid viewhelpers

6.4 Medium

AI Score

Confidence

High

TYPO3 is vulnerable to cross-site scripting (XSS). The vulnerability is due to templates using built-in Fluid ViewHelpers which fail to properly encode user input.

6.4 Medium

AI Score

Confidence

High