Vulnerability Database

296,172

Total vulnerabilities in the database

Cross-Site Scripting in TYPO3 Backend

Failing to properly encode user input, some backend components are vulnerable to Cross-Site Scripting. A valid backend user account is needed to exploit this vulnerability.

CVSS v3:

  • Severity: Unknown
  • Score:
  • AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
Composer icon typo3 / cms 6.2.0 6.2.26
Composer icon typo3 / cms 7.6.0 7.6.10
Composer icon typo3 / cms 8.0.0 8.2.1