GHSA-5cmc-r23m-hvrrMedium

TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module

Published
May 17, 2022
Last Modified
August 28, 2023

🔗 CVE IDs covered (1)

CVE-2013-7077 →

📋 Description

Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products2

  • composer/typo3/cms-core:>= 6.0, < 6.0.12
  • composer/typo3/cms-core:>= 6.1, < 6.1.7

🔗 References (7)