GitHub Advisoryadvisory · Packagist

GHSA-56f9-5563-m2h7 Typo3 XSS Vulnerability

MEDIUM Published 2022-05-17 Modified 2023-08-04 Official page ↗
Aliases
CVE-2015-8755
Ecosystem
Packagist
Packages
typo3/cms
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2023-08-04

Affected packages

• Packagist typo3/cms: >= 6.2, < 6.2.16 → fixed in 6.2.16 • Packagist typo3/cms: >= 7.0, < 7.6.1 → fixed in 7.6.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors.

Related

Alias · CVE (1)

  • CVE-2015-8755 Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References