Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47751

HistoryJun 26, 2024 - 6:32 a.m.

Cross-site Scripting (XSS)

2024-06-2606:32:18

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

typo3

cms

vulnerability

media asset rendering

youtube

vimeo

user input

exploit

backend user account

server system.

6.7 Medium

AI Score

Confidence

High

typo3/cms is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to failing to properly encode user input in online media asset rendering for *.youtube and *.vimeo files, requiring a valid backend user account or write access on the server system to exploit.

6.7 Medium

AI Score

Confidence

High