What is GHSA-4mm3-xgc2-656r?

GHSA-4mm3-xgc2-656r is a security advisory published by GitHub Security Advisories with Low severity. Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting

Which CVE IDs does GHSA-4mm3-xgc2-656r cover?

GHSA-4mm3-xgc2-656r covers the following CVE IDs: CVE-2013-5100. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-4mm3-xgc2-656r?

GHSA-4mm3-xgc2-656r affects 1 product, including: composer/jambagecom/div2007:\u003c 0.10.2.

GHSA-4mm3-xgc2-656rLow

Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2013-5100 →

📋 Description

Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3lib_div::quoteJSvalue function.

🎯 Affected products1

composer/jambagecom/div2007:< 0.10.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2013-5100
https://exchange.xforce.ibmcloud.com/vulnerabilities/81195
http://typo3.org/extensions/repository/view/div2007
https://web.archive.org/web/20130314000411/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001
https://web.archive.org/web/20130815054813/http://www.securityfocus.com/bid/57288
https://github.com/advisories/GHSA-4mm3-xgc2-656r