Description
Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-5016 | Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 4.5.0 before 4.5.34, 4.7.0 before 4.7.19, 6.0.0 before 6.0.14, 6.1.0 before 6.1.9, and 6.2.0 before 6.2.3 allow remote authenticated editors to inject arbitrary web script or HTML via unknown parameters. |
Github GHSA |
GHSA-qqh2-h6gw-6x8x | Typo3 XSS Vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T10:57:17.932Z
Reserved: 2014-06-03T00:00:00.000Z
Link: CVE-2014-3943
No data.
Status : Deferred
Published: 2014-06-03T14:55:11.067
Modified: 2025-04-12T10:46:40.837
Link: CVE-2014-3943
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD
Github GHSA