Back to feed
EUVD-2022-5016 · Published May 14, 2022
Typo3 XSS Vulnerabilities Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters.
Technologies
Typo3 Typo3Typo3 Cms
Weaknesses
CWE-79
References
- http://lists.opensuse.org/opensuse-updates/2014-06/msg00037.html
- http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2014-001/
- http://www.debian.org/security/2014/dsa-2942
- http://www.openwall.com/lists/oss-security/2014/06/03/2
- http://www.securityfocus.com/bid/67625
- https://nvd.nist.gov/vuln/detail/CVE-2014-3943
Potentially impacted assets
See if this affects your attack surface
